Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5gnuplot is affected by a heap buffer overflow at function utf8_copy_one.Check if you run itEPSS 0.21%May 7, 2025
- Medium6.1An admin user can gain unauthorized write access to the /etc/rc.local file on the device, which is executed on a system boot.Check if you run itEPSS 0.35%May 7, 2025
- High8.5BrightSign players running BrightSign OS series 4 prior to v8.5.53.1 or series 5 prior to v9.0.166 contain an execution with unnecessary privileges vulnerability, allowing for privCheck if you run itEPSS 0.19%May 7, 2025
- Medium5.4A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, low-privileged, remote attacker to perform an injection attack againstCheck if you run itEPSS 0.33%May 7, 2025
- Medium6.7A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating sCheck if you run itEPSS 0.17%May 7, 2025
- Medium6.7A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating sCheck if you run itEPSS 0.17%May 7, 2025
- Medium4.6A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating sCheck if you run itEPSS 0.17%May 7, 2025
- Medium4.6A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating sCheck if you run itEPSS 0.17%May 7, 2025
- Medium6.7A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating sCheck if you run itEPSS 0.17%May 7, 2025
- Low3.1The Discourse Code Review Plugin allows users to review GitHub commits on Discourse.Check if you run itEPSS 0.34%May 7, 2025
- High8.8A vulnerability in the web-based management interface of the Wireless LAN Controller feature of Cisco IOS XE Software could allow an authenticated, remote attacker with a lobby ambCheck if you run itEPSS 0.91%May 7, 2025
- Medium6.0A vulnerability in the bootstrap loading of Cisco IOS XE Software could allow an authenticated, local attacker to write arbitrary files to an affected system.Check if you run itEPSS 0.17%May 7, 2025
- High8.3A vulnerability in the Cisco Industrial Ethernet Switch Device Manager (DM) of Cisco IOS Software could allow an authenticated, remote attacker to elevate privileges.Check if you run itEPSS 0.34%May 7, 2025
- High7.1A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN admin privileges can with admin privileges can inject shell command arguments to upload a file on the aCheck this weekEPSS 22.24%May 7, 2025
- High7.8A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, local attacker to gain privileges of the root user on theCheck if you run itEPSS 0.15%May 7, 2025
- Medium5.5A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, local attacker to overwrite arbitrary files on the local fCheck if you run itEPSS 0.17%May 7, 2025
- Medium6.9Craft CMS External Control of Assumed-Immutable Web Parameter VulnerabilityPatch nowKEVEPSS 1.35%May 7, 2025
- Critical9.3sysaid sysaid Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 72.66%May 7, 2025
- Medium4.3Missing Authorization vulnerability in contentstudio Contentstudio contentstudio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ContentsCheck if you run itEPSS 0.24%May 7, 2025
- Medium5.5Improper Control of Generation of Code ('Code Injection') vulnerability in Ultimate Member Ultimate Member ultimate-member allows Code Injection.This issue affects Ultimate Member:Check if you run itEPSS 0.27%May 7, 2025
- Medium5.3Missing Authorization vulnerability in Saad Iqbal Advanced File Manager file-manager-advanced allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affCheck if you run itEPSS 0.37%May 7, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DELUCKS DELUCKS SEO delucks-seo allows Stored XSS.This issue affects DELUCKS SCheck if you run itEPSS 0.21%May 7, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in Moloni Contribuinte Checkout contribuinte-checkout allows Stored XSS.This issue affects Contribuinte Checkout: from n/a through <Check if you run itEPSS 0.14%May 7, 2025
- Medium5.4Cross-Site Request Forgery (CSRF) vulnerability in Smaily Smaily for WP smaily-for-wp allows Cross Site Request Forgery.This issue affects Smaily for WP: from n/a through <= 3.1.7.Check if you run itEPSS 0.15%May 7, 2025
- High7.2Deserialization of Untrusted Data vulnerability in Florent Maillefaud WP Maintenance wp-maintenance allows Object Injection.This issue affects WP Maintenance: from n/a through <= 6Check if you run itEPSS 0.53%May 7, 2025
Sort