Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9A vulnerability was found in FreeFloat FTP Server 1.0.0.Check if you run itEPSS 0.74%May 27, 2025
- Medium6.4The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via HTML attributes in Slider and PostCheck if you run itEPSS 0.37%May 27, 2025
- Medium6.9A vulnerability was found in FreeFloat FTP Server 1.0.0 and classified as critical.Check if you run itEPSS 0.75%May 27, 2025
- Medium6.5IBM Controller 11.0.0, 11.0.1, and 11.1.0 application could allow an authenticated user to obtain sensitive credentials that may be inadvertently included within the source code.Check if you run itEPSS 0.33%May 27, 2025
- Medium6.9A vulnerability has been found in FreeFloat FTP Server 1.0.0 and classified as critical.Check if you run itEPSS 0.74%May 27, 2025
- Medium6.9A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0.0.Check if you run itEPSS 0.74%May 27, 2025
- Medium6.9A vulnerability, which was classified as critical, has been found in FreeFloat FTP Server 1.0.0.Check if you run itEPSS 0.74%May 27, 2025
- Medium6.9A vulnerability classified as critical was found in PHPGurukul Student Record System 3.20.Check if you run itEPSS 0.63%May 27, 2025
- Medium6.4In SIGB PMB before 8.0.1.2, attackers can achieve Local File Inclusion and remote code execution.Check if you run itEPSS 0.64%May 27, 2025
- Medium5.3SIGB PMB before 8.0.1.2 allows SQL injection.Check if you run itEPSS 0.37%May 27, 2025
- Medium5.4The installer in SIGB PMB before and fixed in v.8.0.1.2 allows remote code execution.Check if you run itEPSS 0.43%May 27, 2025
- Medium6.1code-projects Online Exam Mastering System 1.0 is vulnerable to Cross Site Scripting (XSS) via the name field in the feedback form.Check if you run itEPSS 0.32%May 27, 2025
- High7.1An arbitrary file read vulnerability in the ReadTextAsynchronous function of SSCMS v7.3.1 allows attackers to read arbitrary files via sending a crafted GET request to /cms/templatCheck if you run itEPSS 0.37%May 27, 2025
- Medium5.4maccms10 v2025.1000.4047 is vulnerable to Server-Side request forgery (SSRF) in Friend Link Management.Check if you run itEPSS 0.35%May 27, 2025
- UnknownCVE-2025-32421 is named in a Cloudflare managed-rules release.Check if you run itEPSS 0.80%May 27, 2025
- Low3.7Gibbon before 29.0.00 allows CSRF.Check if you run itEPSS 0.19%May 27, 2025
- Medium6.5An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, W1000, MoCheck if you run itEPSS 0.36%May 27, 2025
- Unknownanji-plus report Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 51.75%May 27, 2025
- Medium6.5An issue was discovered in Wi-Fi in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1080, 1280, 1330, 1380, 1480, W920, W930, and W1000.Check if you run itEPSS 0.27%May 27, 2025
- High7.5An issue was discovered in the GPU in Samsung Mobile Processor Exynos 1480 and 2400.Check if you run itEPSS 0.42%May 27, 2025
- UnknownCVE-2024-15077 is named in a Cloudflare managed-rules release.Open the advisoryMay 27, 2025
- Unknownroxyfileman roxy_fileman Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 73.06%May 27, 2025
- UnknownElastic Elasticsearch Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 94.79%May 27, 2025
- Unknownaviary_image_editor_add-on_for_gravity_forms_project aviary_image_editor_add-on_for_gravity_forms Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 40.59%May 27, 2025
- Medium6.9A vulnerability was found in Kashipara Responsive Online Learing Platform 1.0.Check if you run itEPSS 0.63%May 26, 2025
Sort