Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1Path Traversal: '.../...//'Patch nowKEVEPSS 0.65%Jun 3, 2025
- High8.6An issue was discovered in Samsung Mobile Processor Exynos 1480 and 2400.Check if you run itEPSS 0.34%Jun 3, 2025
- High8.6An issue was discovered in Samsung Mobile Processor Exynos 1480 and 2400.Check if you run itEPSS 0.34%Jun 3, 2025
- UnknownWP Job Portal WordPress Plugin Unauthenticated SQL InjectionPatch nowKEVEPSS 3.60%Jun 3, 2025
- Unknownroxy-wi roxy-wi Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 28.79%Jun 3, 2025
- Unknowntrueranker true_ranker Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 77.94%Jun 3, 2025
- High8.8Use after free in Blink in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 3.45%Jun 2, 2025
- Medium6.4The WordPress Comments Import & Export plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_settings function in alCheck if you run itEPSS 0.29%Jun 2, 2025
- Medium6.5Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Accessing Functionality Not Properly ConstrainedCheck if you run itEPSS 0.28%Jun 2, 2025
- Medium5.3HAX open-apis provides microservice apis for HAX webcomponents repo that are shared infrastructure calls.Check if you run itEPSS 0.36%Jun 2, 2025
- High8.7tar-fs provides filesystem bindings for tar-stream.Check if you run itEPSS 0.58%Jun 2, 2025
- High8.8Sonos Era 300 Heap-based Buffer Overflow Remote Code Execution Vulnerability.Check if you run itEPSS 0.38%Jun 2, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in cimatti Contact Forms by Cimatti contact-forms allows Cross Site Request Forgery.This issue affects Contact Forms by Cimatti: froCheck if you run itEPSS 0.14%Jun 2, 2025
- High8.0In Universal Forwarder for Windows versions below 9.4.2, 9.3.4, 9.2.6, and 9.1.9, a new installation of or an upgrade to an affected version can result in incorrect permissions assCheck if you run itEPSS 0.29%Jun 2, 2025
- Medium4.3In Splunk Enterprise versions below 9.4.2, 9.3.4 and 9.2.6, and Splunk Cloud Platform versions below 9.3.2411.102, 9.3.2408.111 and 9.2.2406.118, a low-privileged user that does noCheck this weekEPSS 29.30%Jun 2, 2025
- High7.8A maliciously crafted RFA file, when linked or imported into Autodesk Revit, can force a Use-After-Free vulnerability.Check if you run itEPSS 0.20%Jun 2, 2025
- Medium5.4An open redirection vulnerability exists in multiple WSO2 products due to improper validation of the multi-option URL in the authentication endpoint when multi-option authenticatioCheck if you run itEPSS 0.23%Jun 2, 2025
- Medium5.2A reflected cross-site scripting (XSS) vulnerability exists in multiple WSO2 products due to insufficient output encoding in error messages generated by the JDBC user store connectCheck if you run itEPSS 0.53%Jun 2, 2025
- Medium4.3A stored cross-site scripting (XSS) vulnerability exists in the Management Console of multiple WSO2 products due to insufficient input validation in the Rich Text Editor within theCheck if you run itEPSS 0.20%Jun 2, 2025
- Medium6.8An arbitrary file upload vulnerability exists in multiple WSO2 products due to improper validation of user input in SOAP admin services.Check this weekEPSS 17.19%Jun 2, 2025
- Medium6.5A server-side request forgery (SSRF) vulnerability exists in multiple WSO2 products due to improper input validation in SOAP admin services.Check if you run itEPSS 0.22%Jun 2, 2025
- Medium6.9SignXML is an implementation of the W3C XML Signature standard in Python.Check if you run itEPSS 0.23%Jun 2, 2025
- Medium6.9SignXML is an implementation of the W3C XML Signature standard in Python.Check if you run itEPSS 0.22%Jun 2, 2025
- Medium5.3MyBB is free and open source forum software.Check if you run itEPSS 0.34%Jun 2, 2025
- High7.2MyBB is free and open source forum software.Check if you run itEPSS 0.54%Jun 2, 2025
Sort