Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1A Cross Site Scripting (XSS) vulnerability in Sitecom WLX-2006 Wall Mount Range Extender N300 v1.5 and before allows an attacker to manipulate the language cookie to inject malicioCheck if you run itEPSS 0.26%Jun 2, 2025
- Medium6.5Sitecom WLX-2006 Wall Mount Range Extender N300 v.1.5 and before is vulnerable to Use of Default Credentials.Check if you run itEPSS 0.28%Jun 2, 2025
- Medium5.9A Local File Inclusion (LFI) vulnerability exists in Sitecom WLX-2006 Wall Mount Range Extender N300 v1.5 and before, which allows an attacker to manipulate the "language" cookie tCheck if you run itEPSS 0.50%Jun 2, 2025
- UnknownCVE-2024-0759 is named in a Cloudflare managed-rules release.Check if you run itEPSS 0.92%Jun 2, 2025
- High8.8RoundCube Webmail Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 99.71%Jun 1, 2025
- Medium6.3IBM Planning Analytics Local 2.0 and 2.1 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system.Check if you run itEPSS 0.25%Jun 1, 2025
- Medium6.5IBM Planning Analytics Local 2.0 and 2.1 could allow a privileged user to delete files from directories due to improper pathname restriction.Check if you run itEPSS 0.46%Jun 1, 2025
- Medium4.8IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to cross-site scripting.Check if you run itEPSS 0.20%Jun 1, 2025
- Medium5.4IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to cross-site scripting.Check if you run itEPSS 0.21%Jun 1, 2025
- Medium6.5IBM InfoSphere Information Server 11.7 stores credential information for database authentication in a cleartext parameter file that could be viewed by an authenticated user.Check if you run itEPSS 0.22%Jun 1, 2025
- Medium5.3A vulnerability, which was classified as critical, was found in JeeWMS up to 20250504.Check if you run itEPSS 0.34%May 31, 2025
- Medium5.3A vulnerability, which was classified as critical, has been found in JeeWMS up to 20250504.Check if you run itEPSS 0.36%May 31, 2025
- Medium5.3A vulnerability classified as critical was found in JeeWMS up to 20250504.Check if you run itEPSS 0.38%May 31, 2025
- Medium5.3A vulnerability classified as critical has been found in JeeWMS up to 20250504.Check if you run itEPSS 0.36%May 31, 2025
- Medium5.3A vulnerability was found in JeeWMS up to 20250504.Check if you run itEPSS 0.35%May 31, 2025
- Medium5.3A vulnerability was found in JeeWMS up to 20250504.Check if you run itEPSS 0.51%May 31, 2025
- Medium5.3A vulnerability was found in JeeWMS up to 20250504.Check if you run itEPSS 0.35%May 31, 2025
- Medium4.8A vulnerability was found in Yifang CMS up to 2.0.2 and classified as problematic.Check if you run itEPSS 0.29%May 31, 2025
- Medium5.1A vulnerability, which was classified as problematic, was found in Yifang CMS up to 2.0.2.Check if you run itEPSS 0.71%May 31, 2025
- Medium5.3A vulnerability, which was classified as critical, has been found in ashinigit 天青一白 XueShengZhuSu 学生住宿管理系统 up to 4d3f0ada0e71482c1e51fd5f5615e5a3d8bcbfbb.Check if you run itEPSS 0.44%May 31, 2025
- Medium5.3A vulnerability classified as critical was found in NuCom NC-WR744G 8.5.5 Build 20200530.307.Check if you run itEPSS 0.30%May 31, 2025
- Medium5.3A vulnerability classified as problematic has been found in Astun Technology iShare Maps 5.4.0.Check if you run itEPSS 0.39%May 31, 2025
- Medium5.3A vulnerability was found in Astun Technology iShare Maps 5.4.0.Check if you run itEPSS 0.39%May 31, 2025
- Medium6.9A vulnerability was found in SourceCodester Health Center Patient Record Management System 1.0.Check if you run itEPSS 0.53%May 31, 2025
- High7.2The Newsletters plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.9.9.9 via the 'file' parameter.Check if you run itEPSS 0.82%May 31, 2025
Sort