Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9A vulnerability was found in PHPGurukul Auto Taxi Stand Management System 1.0.Check if you run itEPSS 0.64%May 19, 2025
- Medium4.8The Ninja Forms WordPress plugin before 3.10.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-SiteCheck if you run itEPSS 0.26%May 19, 2025
- Medium4.8The Ninja Forms WordPress plugin before 3.10.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-SiteCheck if you run itEPSS 0.26%May 19, 2025
- Medium4.8The Ninja Forms WordPress plugin before 3.10.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-SiteCheck if you run itEPSS 0.31%May 19, 2025
- Medium5.4The Qi Blocks WordPress plugin before 1.4 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could alCheck if you run itEPSS 0.25%May 19, 2025
- Medium5.4The Qi Blocks WordPress plugin before 1.4 does not validate and escape some of its Countdown block options before outputting them back in a page/post where the block is embed, whicCheck if you run itEPSS 0.25%May 19, 2025
- Medium5.4The Qi Blocks WordPress plugin before 1.4 does not validate and escape some of its Counter block options before outputting them back in a page/post where the block is embed, whichCheck if you run itEPSS 0.29%May 19, 2025
- High8.6The ThreatSonar Anti-Ransomware from TeamT5 has a Privilege Escalation vulnerability, allowing remote attackers with intermediate privileges to escalate their privileges to highestCheck if you run itEPSS 0.49%May 19, 2025
- Medium6.9A vulnerability was found in PHPGurukul Auto Taxi Stand Management System 1.0 and classified as critical.Check if you run itEPSS 0.64%May 19, 2025
- Medium5.3A vulnerability has been found in SourceCodester Student Result Management System 1.0 and classified as critical.Check if you run itEPSS 0.91%May 19, 2025
- Medium6.9A vulnerability, which was classified as critical, was found in PHPGurukul Zoo Management System 2.1.Check if you run itEPSS 0.56%May 19, 2025
- Medium6.4The All in One SEO – Powerful SEO Plugin to Boost SEO Rankings & Increase Traffic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the post Meta Description anCheck if you run itEPSS 0.30%May 19, 2025
- Medium6.9A vulnerability, which was classified as critical, has been found in PHPGurukul Zoo Management System 2.1.Check if you run itEPSS 0.64%May 19, 2025
- Medium6.9A vulnerability classified as critical was found in SourceCodester Client Database Management System 1.0.Check if you run itEPSS 0.56%May 19, 2025
- Medium6.9A vulnerability classified as critical has been found in PHPGurukul Daily Expense Tracker System 1.1.Check if you run itEPSS 0.64%May 19, 2025
- Medium6.9A vulnerability was found in PHPGurukul Daily Expense Tracker System 1.1.Check if you run itEPSS 0.64%May 19, 2025
- Medium6.9A vulnerability was found in PHPGurukul Notice Board System 1.0.Check if you run itEPSS 0.64%May 19, 2025
- Medium4.8A vulnerability was found in iop-apl-uw basestation3 up to 3.0.4 and classified as problematic.Check if you run itEPSS 0.52%May 19, 2025
- Medium6.5A flaw in Node.js 20's HTTP parser allows improper termination of HTTP/1 headers using instead of the required .Check if you run itEPSS 0.51%May 19, 2025
- High7.5The C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user-supplied inputs when executing in a background thread, crashing the Node.js process.Check if you run itEPSS 0.82%May 19, 2025
- Low3.7In Node.js, the internal binding leaks memory due to a corrupted pointer in : a UTF-16 path buffer is allocated but subsequently overwritten when the file descriptor is set.Check if you run itEPSS 0.56%May 19, 2025
- Medium4.4A misconfigured access token mechanism in the Unifi Protect Application (Version 5.3.41 and earlier) could permit the recipient of a "Share Livestream" link to maintain access to tCheck if you run itEPSS 0.35%May 19, 2025
- Critical10.0A malicious actor with access to the management network could execute a remote code execution (RCE) by exploiting a heap buffer overflow vulnerability in the UniFi Protect CamerasCheck if you run itEPSS 1.16%May 19, 2025
- Low3.7This CVE record has been withdrawn due to a duplicate entry CVE-2025-23165.Open the advisoryMay 19, 2025
- Medium6.9A vulnerability has been found in D-Link DI-7003GV2 24.04.18D1 R(68125) and classified as problematic.Check if you run itEPSS 1.59%May 19, 2025
Sort