Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7Frappe is a full-stack web application framework.Check if you run itEPSS 0.42%Jun 30, 2025
- Low2.3Host Header Injection (HHI) vulnerability in the Hotspot Shield VPN client, which can induce unexpected behaviour when accessing third-party web applications through the VPN tunnelCheck if you run itEPSS 0.32%Jun 30, 2025
- Medium5.1Reflected Cross-Site Scripting (XSS) vulnerability in Daily Expense Manager v1.0.Check if you run itEPSS 0.21%Jun 30, 2025
- Medium5.1Reflected Cross-Site Scripting (XSS) vulnerability in Daily Expense Manager v1.0.Check if you run itEPSS 0.21%Jun 30, 2025
- High8.7user enumeration vulnerability in Daily Expense Manager v1.0.Check if you run itEPSS 0.34%Jun 30, 2025
- High7.5A buffer overflow in the formSetCfm() function of Tenda AC1206 1200M 11ac US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 allows attackers to cause a Denial of Service (DoS) via a craftedCheck if you run itEPSS 0.42%Jun 30, 2025
- High7.5A Cross-Site Request Forgery (CSRF) leading to Cross-Site Scripting (XSS) vulnerability in the UCRM Client Signup Plugin (v1.3.4 and earlier) could allow privilege escalation if anCheck if you run itEPSS 0.17%Jun 29, 2025
- Medium5.3A vulnerability, which was classified as problematic, was found in DaiCuo up to 1.3.13.Check if you run itEPSS 0.28%Jun 29, 2025
- Medium5.3A vulnerability, which was classified as problematic, has been found in SeaCMS up to 13.2.Check if you run itEPSS 0.27%Jun 29, 2025
- UnknownFortinet fortiswitchmanager Relative Path TraversalPatch nowKEVEPSS 0.93%Jun 29, 2025
- High8.7A vulnerability classified as critical was found in TOTOLINK A702R up to 4.0.0-B20230721.1521.Check if you run itEPSS 0.99%Jun 28, 2025
- High8.7A vulnerability classified as critical has been found in TOTOLINK X15 up to 1.0.0-B20230714.1105.Check if you run itEPSS 1.03%Jun 28, 2025
- Medium4.3The MicroPayments – Fans Paysite: Paid Creator Subscriptions, Digital Assets, Wallet plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and incCheck if you run itEPSS 0.17%Jun 28, 2025
- High8.8The Game Users Share Buttons plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the ajaxDeleteTheme() function in all versionCheck if you run itEPSS 0.86%Jun 28, 2025
- Unknownstitionai devika External Control of File Name or PathPatch nowKEVEPSS 2.07%Jun 28, 2025
- Medium5.9Roo Code is an AI-powered autonomous coding agent.Check if you run itEPSS 0.50%Jun 27, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in rui_mashita Aioseo Multibyte Descriptions aioseo-multibyte-descriptions allows Cross Site Request Forgery.This issue affects AiosCheck if you run itEPSS 0.14%Jun 27, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in imw3 My Wp Brand my-wp-brand allows Cross Site Request Forgery.This issue affects My Wp Brand: from n/a through <= 1.1.3.Check if you run itEPSS 0.15%Jun 27, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in macbookandrew WP YouTube Live wp-youtube-live allows Cross Site Request Forgery.This issue affects WP YouTube Live: from n/a throCheck if you run itEPSS 0.16%Jun 27, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Themeisle Cyrlitera cyrlitera allows Cross Site Request Forgery.This issue affects Cyrlitera: from n/a through <= 1.3.0.Check if you run itEPSS 0.16%Jun 27, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in DarkMySite DarkMySite darkmysite allows Cross Site Request Forgery.This issue affects DarkMySite: from n/a through <= 1.2.8.Check if you run itEPSS 0.14%Jun 27, 2025
- Medium6.9Buffer Overflow vulnerability exists in multiple versions of TB-eye network recorders and AHD recorders.Check if you run itEPSS 0.37%Jun 27, 2025
- High7.5An issue in Hikvision DS-2CD1321-I V5.7.21 build 230819 allows attackers to cause a Denial of Service (DoS) via sending a crafted POST request to the endpoint /ISAPI/Security/challCheck if you run itEPSS 0.62%Jun 27, 2025
- Medium5.3IBM InfoSphere DataStage Flow Designer in IBM InfoSphere Information Server 11.7 discloses sensitive user information in API requests in clear text that could be intercepted usingCheck if you run itEPSS 0.17%Jun 26, 2025
- Medium4.2Under certain conditions, an authenticated user request may execute with stale privileges following an intentional change by an authorized administrator.Check if you run itEPSS 0.17%Jun 26, 2025
Sort