Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical10.0Unrestricted Upload of File with Dangerous Type vulnerability in StoreKeeper B.V.Check if you run itEPSS 0.46%May 23, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saad Iqbal Quick Contact Form quick-contact-form allows Reflected XSS.This issCheck if you run itEPSS 0.23%May 23, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Soft8Soft LLC Verge3D verge3d allows Reflected XSS.This issue affects Verge3D:Check if you run itEPSS 0.23%May 23, 2025
- High7.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in wpjobportal WP Job Portal wp-job-portal allows Path Traversal.This issue affects WPCheck if you run itEPSS 0.52%May 23, 2025
- Medium6.5Missing Authorization vulnerability in Leadinfo Leadinfo leadinfo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Leadinfo: from n/a throCheck if you run itEPSS 0.31%May 23, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in catkin ReDi Restaurant Reservation redi-restaurant-reservation allows ReflecteCheck if you run itEPSS 0.23%May 23, 2025
- Critical9.3Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Majestic Support Majestic Support majestic-support allows SQL Injection.This iCheck if you run itEPSS 0.37%May 23, 2025
- Medium6.5Missing Authorization vulnerability in dastan800 Visual Header visual-header allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Visual HeadeCheck if you run itEPSS 0.31%May 23, 2025
- Critical9.8Deserialization of Untrusted Data vulnerability in AncoraThemes Kids Planet kidsplanet allows Object Injection.This issue affects Kids Planet: from n/a through <= 2.2.14.Check if you run itEPSS 0.50%May 23, 2025
- Critical9.8Deserialization of Untrusted Data vulnerability in Pagaleve Pix 4x sem juros - Pagaleve wc-pagaleve allows Object Injection.This issue affects Pix 4x sem juros - Pagaleve: from n/aCheck if you run itEPSS 0.53%May 23, 2025
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in GoodLayers Tourmaster tourmaster allows PHP Local File InclCheck if you run itEPSS 0.66%May 23, 2025
- Medium6.1Iridium Certus 700 version 1.0.1 has an embedded credentials vulnerability in the code.Check if you run itEPSS 0.15%May 23, 2025
- Medium6.3The Intellian C700 web panel allows you to add firewall rules.Check if you run itEPSS 0.46%May 23, 2025
- Medium6.9The SSID field is not parsed correctly and can be used to inject commands into the hostpad.conf file.Check if you run itEPSS 0.23%May 23, 2025
- High8.7A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1.Check if you run itEPSS 0.41%May 23, 2025
- Medium6.5An issue has been discovered in GitLab CE/EE affecting all versions from 11.6 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1.Check if you run itEPSS 0.51%May 23, 2025
- Low3.5A business logic error in GitLab CE/EE affecting all versions starting from 12.1 prior to 17.10.7, 17.11 prior to 17.11.3 and 18.0 prior to 18.0.1 where an attacker can cause a braCheck if you run itEPSS 0.40%May 23, 2025
- Medium5.3A vulnerability was found in zongzhige ShopXO 6.5.0.Check if you run itEPSS 0.43%May 23, 2025
- Medium5.3A vulnerability was found in Fujian Kelixun 1.0.Check if you run itEPSS 0.52%May 23, 2025
- High7.2The Solid Mail – SMTP email and logging made by SolidWP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via email Name, Subject, and Body in all versions up to, aCheck if you run itEPSS 0.38%May 23, 2025
- Medium6.9A vulnerability was found in Fujian Kelixun 1.0.Check if you run itEPSS 2.12%May 23, 2025
- Medium6.9A vulnerability was found in TOZED ZLT W51 up to 1.4.2 and classified as critical.Check if you run itEPSS 0.47%May 23, 2025
- High8.3Zohocorp ManageEngine ADAudit Plus versions below 8511 are vulnerable to SQL injection in the OU History report.Check if you run itEPSS 1.53%May 23, 2025
- High8.3Zohocorp ManageEngine ADAudit Plus versions below 8511 are vulnerable to SQL injection while exporting reports.Check this weekEPSS 38.28%May 23, 2025
- Critical9.1Token used for resetting passwords in MegaBIP software are generated using a small space of random values combined with a queryable value.Check if you run itEPSS 0.51%May 23, 2025
Sort