Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5The issue was addressed with improved memory handling.Check if you run itEPSS 0.19%May 19, 2025
- High8.8The issue was addressed with improved checks.Check if you run itEPSS 0.74%May 19, 2025
- Medium5.5The issue was addressed with improved checks.Check if you run itEPSS 0.16%May 19, 2025
- Medium5.5A permissions issue was addressed with additional restrictions.Check if you run itEPSS 0.17%May 19, 2025
- Low3.3A logic issue was addressed with improved checks.Check if you run itEPSS 0.18%May 19, 2025
- Medium5.3A vulnerability classified as problematic was found in PHPGurukul Credit Card Application Management System 1.0.Check if you run itEPSS 0.53%May 19, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in asmedia allows Reflected XSS.This issue affects moseter: from n/a through 1.3.Check if you run itEPSS 0.23%May 19, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in fyrewurks polka dots allows Reflected XSS.This issue affects polka dots: fromCheck if you run itEPSS 0.23%May 19, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Asmedia Tuaug4 allows Reflected XSS.This issue affects Tuaug4: from n/a througCheck if you run itEPSS 0.23%May 19, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mythemes my white allows Reflected XSS.This issue affects my white: from n/a tCheck if you run itEPSS 0.23%May 19, 2025
- High7.5A flaw was found in the soup_multipart_new_from_message() function of the libsoup HTTP library, which is commonly used by GNOME and other applications to handle web communications.Check if you run itEPSS 0.81%May 19, 2025
- Medium5.3A vulnerability was found in PHPGurukul Employee Record Management System 1.3.Check if you run itEPSS 0.48%May 19, 2025
- None0.0Rejected reason: Unused CVE record, incorrectly reservedOpen the advisoryMay 19, 2025
- Medium6.9A vulnerability was found in SourceCodester Apartment Visitor Management System 1.0.Check if you run itEPSS 0.63%May 19, 2025
- Medium5.3Missing Authorization vulnerability in Embed360 Embed and Integrate Etsy Shop embed-and-integrate-etsy-shop allows Accessing Functionality Not Properly Constrained by ACLs.This issCheck if you run itEPSS 0.27%May 19, 2025
- Medium5.4Cross-Site Request Forgery (CSRF) vulnerability in ed4becky Rootspersona rootspersona allows Cross Site Request Forgery.This issue affects Rootspersona: from n/a through <= 3.7.5.Check if you run itEPSS 0.15%May 19, 2025
- Medium5.4Cross-Site Request Forgery (CSRF) vulnerability in RedefiningTheWeb Dynamic Pricing & Discounts Lite for WooCommerce woo-dynamic-pricing-discounts-lite allows Cross Site Request FoCheck if you run itEPSS 0.15%May 19, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 10Web Form Maker by 10Web form-maker allows Stored XSS.This issue affects FormCheck if you run itEPSS 0.22%May 19, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Element Invader ElementInvader Addons for Elementor elementinvader-addons-for-Check if you run itEPSS 0.22%May 19, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in sbouey Falang multilanguage falang allows Cross Site Request Forgery.This issue affects Falang multilanguage: from n/a through <=Check if you run itEPSS 0.15%May 19, 2025
- Medium5.4Cross-Site Request Forgery (CSRF) vulnerability in shohei.tanaka Japanized For WooCommerce woocommerce-for-japan allows Cross Site Request Forgery.This issue affects Japanized ForCheck if you run itEPSS 0.15%May 19, 2025
- Medium5.3Missing Authorization vulnerability in Majestic Support Majestic Support majestic-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affectsCheck if you run itEPSS 0.27%May 19, 2025
- High7.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ruben Garcia AutomatorWP automatorwp allows Blind SQL Injection.This issue affCheck if you run itEPSS 0.35%May 19, 2025
- High8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in davidfcarr RSVPMarker rsvpmaker allows SQL Injection.This issue affects RSVPMaCheck if you run itEPSS 0.34%May 19, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stylemix Cost Calculator Builder cost-calculator-builder allows Stored XSS.ThiCheck if you run itEPSS 0.22%May 19, 2025
Sort