Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1The Front End Users WordPress plugin through 3.2.32 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting whicCheck if you run itEPSS 0.55%Apr 22, 2025
- Medium6.4The Tax Switch for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘class-name’ parameter in all versions up to, and including, 1.4.2 due to iCheck if you run itEPSS 0.33%Apr 22, 2025
- Medium6.4The WP Import Export Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘wpiePreviewData’ function in all versions up to, and including, 3.9.27 due to iCheck if you run itEPSS 0.29%Apr 22, 2025
- High8.8The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the gspb_make_proxy_api_requeCheck if you run itEPSS 2.57%Apr 22, 2025
- High7.1Hitachi Ops Center Common Services within Hitachi Ops Center Analyzer viewpoint OVF contains an authentication credentials leakage vulnerability.This issue affects Hitachi Ops CentCheck if you run itEPSS 0.31%Apr 22, 2025
- Medium5.5Hitachi Ops Center Common Services within Hitachi Ops Center OVA contains an information exposure vulnerability.Check if you run itEPSS 0.17%Apr 22, 2025
- Medium4.9**UNSUPPORTED WHEN ASSIGNED** A path traversal vulnerability in the web management interface of the Zyxel AMG1302-T10B firmware version 2.00(AAJC.16)C0 could allow an authenticatedCheck this weekEPSS 12.62%Apr 22, 2025
- Medium6.7An improper privilege management vulnerability in the recovery function of the Zyxel USG FLEX H series uOS firmware version V1.31 and earlier could allow an authenticated local attCheck if you run itEPSS 0.20%Apr 22, 2025
- High7.8An incorrect permission assignment vulnerability in the PostgreSQL commands of the Zyxel USG FLEX H series uOS firmware versions from V1.20 through V1.31 could allow an authenticatCheck if you run itEPSS 0.94%Apr 22, 2025
- Medium5.3A vulnerability was found in xxyopen Novel-Plus 5.1.0.Check if you run itEPSS 0.60%Apr 22, 2025
- Medium5.3A vulnerability was found in CodeCanyon RISE Ultimate Project Manager 3.8.2 and classified as problematic.Check if you run itEPSS 0.49%Apr 22, 2025
- High8.6A vulnerability, which was classified as critical, was found in H3C GR-3000AX up to V100R006.Check if you run itEPSS 0.52%Apr 22, 2025
- Medium6.3A vulnerability, which was classified as problematic, has been found in YXJ2018 SpringBoot-Vue-OnlineExam 1.0.Check if you run itEPSS 0.61%Apr 22, 2025
- Medium6.1A cross-site scripting (reflected XSS) vulnerability was found in Mettler Toledo FreeWeight.Net Web Reports Viewer 8.4.0 (440).Check if you run itEPSS 0.24%Apr 22, 2025
- Critical9.8LabVantage before LV 8.8.0.13 HF6 allows local file inclusion.Check if you run itEPSS 0.47%Apr 22, 2025
- High7.8DPMAdirektPro 4.1.5 is vulnerable to DLL Hijacking.Check if you run itEPSS 0.18%Apr 22, 2025
- Critical9.8MuM (aka Mensch und Maschine) MapEdit (aka mapedit-web) 24.2.3 is vulnerable to SQL Injection that allows an attacker to execute malicious SQL statements that control a web applicaCheck if you run itEPSS 0.43%Apr 22, 2025
- High7.3Codemers KLIMS 1.6.DEV allows Python code injection.Check if you run itEPSS 0.31%Apr 22, 2025
- High7.3Codemers KLIMS 1.6.DEV lacks a proper access control mechanism, allowing a normal KLIMS user to perform all the actions that an admin can perform, such as modifying the configuratiCheck if you run itEPSS 0.34%Apr 22, 2025
- Critical9.8TCPWave DDI 11.34P1C2 allows Remote Code Execution via Unrestricted File Upload (combined with Path Traversal).Check if you run itEPSS 1.01%Apr 22, 2025
- Critical10.0SAP NetWeaver Unrestricted File Upload VulnerabilityPatch nowKEVEPSS 99.49%Apr 22, 2025
- Medium6.5D-Link DIR-816 A2V1.1.0B05 was found to contain a command injection in /goform/delRouting.Check if you run itEPSS 1.02%Apr 22, 2025
- High7.3Francois Jacquet RosarioSIS v12.0.0 was discovered to contain a content spoofing vulnerability in the Theme configuration under the My Preferences module.Check if you run itEPSS 0.29%Apr 22, 2025
- High7.0In Rollback Rx Professional 12.8.0.0, the driver file shieldm.sys allows local users to cause a denial of service because of a null pointer dereference from IOCtl 0x96202000.Check if you run itEPSS 0.36%Apr 22, 2025
- High7.5An issue in UPF in Open5GS UPF versions up to v2.7.2 results an assertion failure vulnerability in PFCP session parameter validation.Check if you run itEPSS 0.79%Apr 22, 2025
Sort