Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7An issue has been discovered in GitLab EE that allows for cross-site-scripting attack and content security policy bypass in a user's browser under specific conditions, affecting alCheck if you run itEPSS 0.57%May 30, 2025
- Medium6.5The Simple Page Access Restriction plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.31.Check if you run itEPSS 0.23%May 30, 2025
- Medium6.5Missing Authorization vulnerability in BinaryCarpenter Woo Slider Pro woo-slider-pro-drag-drop-slider-builder-for-woocommerce allows Exploiting Incorrectly Configured Access ControCheck if you run itEPSS 0.26%May 30, 2025
- High7.8Due to excessive privileges granted to the web user running the airpointer web platform, a malicious actor that gains control of the this user would be able to privilege escalate tCheck if you run itEPSS 0.17%May 30, 2025
- Medium6.6A malicious user with administrative privileges in the web portal would be able to manipulate the Diagnostics module to obtain remote code execution on the local device as a low prCheck if you run itEPSS 0.44%May 30, 2025
- Medium6.4The NinjaTeam Chat for Telegram plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘username’ parameter in all versions up to, and including, 1.1 due to insuCheck if you run itEPSS 0.28%May 30, 2025
- Medium4.3The Featured Image Plus – Quick & Bulk Edit with Unsplash plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the fip_save_Check if you run itEPSS 0.31%May 30, 2025
- Medium6.4The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data-lakit-element-link’ parameter in all versions up to, and incCheck if you run itEPSS 0.29%May 30, 2025
- Medium6.9Client-side enforcement of server-side security issue exists in wivia 5 all versions.Check if you run itEPSS 0.31%May 30, 2025
- Medium5.1Cross-site scripting vulnerability exists in wivia 5 all versions.Check if you run itEPSS 0.24%May 30, 2025
- High7.1An OS Command Injection issue exists in wivia 5 all versions.Check if you run itEPSS 1.23%May 30, 2025
- High8.1Zitadel is open-source identity infrastructure software.Check if you run itEPSS 0.41%May 30, 2025
- Medium4.6FreeScout is a free self-hosted help desk and shared mailbox.Check if you run itEPSS 0.27%May 30, 2025
- Medium5.1FreeScout is a free self-hosted help desk and shared mailbox.Check if you run itEPSS 0.41%May 30, 2025
- Medium6.1FreeScout is a free self-hosted help desk and shared mailbox.Check if you run itEPSS 0.27%May 30, 2025
- Critical9.1Fabio is an HTTP(S) and TCP router for deploying applications managed by consul.Check if you run itEPSS 0.47%May 30, 2025
- High8.6GetSimple CMS is a content management system.Check if you run itEPSS 1.00%May 30, 2025
- Medium5.3Gradio is an open-source Python package that allows quick building of demos and web application for machine learning models, API, or any arbitrary Python function.Check if you run itEPSS 0.69%May 30, 2025
- High8.6Spring Cloud Gateway Server forwards the X-Forwarded-For and Forwarded headers from untrusted proxies.Check if you run itEPSS 0.36%May 30, 2025
- Medium6.6Laravel Rest Api is an API generator.Check if you run itEPSS 0.64%May 30, 2025
- Medium6.4The Minimal Share Buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘align’ parameter in all versions up to, and including, 1.7.3 due to insufficienCheck if you run itEPSS 0.31%May 30, 2025
- High8.3Valtimo is a platform for Business Process Automation.Check if you run itEPSS 0.35%May 30, 2025
- Medium6.1FreeScout is a free self-hosted help desk and shared mailbox.Check if you run itEPSS 0.57%May 30, 2025
- Low2.7Project AI is a platform designed to create AI agents.Check if you run itEPSS 0.59%May 30, 2025
- Medium5.3Computer Vision Annotation Tool (CVAT) is an interactive video and image annotation tool for computer vision.Check if you run itEPSS 0.30%May 30, 2025
Sort