Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7A vulnerability, which was classified as critical, was found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713.Check if you run itEPSS 0.98%Jun 16, 2025
- Medium5.3A vulnerability was found in Intera InHire up to 20250530.Check if you run itEPSS 0.29%Jun 16, 2025
- High8.7A vulnerability classified as critical was found in TOTOLINK T10 4.1.8cu.5207.Check if you run itEPSS 0.98%Jun 16, 2025
- High8.7A vulnerability classified as critical has been found in TOTOLINK T10 4.1.8cu.5207.Check if you run itEPSS 0.98%Jun 16, 2025
- High7.8A Server-Side Request Forgery (SSRF) vulnerability was identified in the @opennextjs/cloudflare package.Check if you run itEPSS 0.97%Jun 16, 2025
- Medium4.8A vulnerability, which was classified as problematic, was found in CodeAstro Food Ordering System 1.0.Check if you run itEPSS 0.34%Jun 16, 2025
- High8.7A vulnerability, which was classified as critical, has been found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713.Check if you run itEPSS 0.98%Jun 16, 2025
- High8.7A vulnerability classified as critical was found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713.Check if you run itEPSS 0.95%Jun 16, 2025
- High8.7A vulnerability classified as critical has been found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713.Check if you run itEPSS 1.24%Jun 16, 2025
- High8.7SessionClicks in Liferay Portal 7.0.0 through 7.4.3.21, and Liferay DXP 7.4 GA through update 9, 7.3 GA through update 25, and older unsupported versions does not restrict the saviCheck if you run itEPSS 0.64%Jun 16, 2025
- Critical9.3A vulnerability, which was classified as critical, has been found in D-Link DIR-632 FW103B08.Check if you run itEPSS 2.78%Jun 16, 2025
- Medium4.8An open redirection vulnerability in M-Files mobile applications for Android and iOS prior to version 25.6.0 allows attackers to use maliciously crafted PDF files to trick other usCheck if you run itEPSS 0.27%Jun 16, 2025
- Medium5.1Reflected Cross-Site Scripting (XSS) vulnerability in /pages/search-results-page in Nosto, which allows remote attackers to execute arbitrary code via the q GET request parameter.Check if you run itEPSS 0.81%Jun 16, 2025
- Medium5.3A vulnerability was found in WuKongOpenSource WukongCRM 9.0 and classified as problematic.Check if you run itEPSS 0.28%Jun 16, 2025
- Medium5.3A vulnerability has been found in jflyfox jfinal_cms 5.0.1 and classified as problematic.Check if you run itEPSS 0.31%Jun 16, 2025
- Medium6.9A vulnerability was found in szluyu99 gin-vue-blog up to 61dd11ccd296e8642a318ada3ef7b3f7776d2410.Check if you run itEPSS 0.42%Jun 16, 2025
- Low2.1PingFederate OAuth2 grant duplication in PostgreSQL persistent storage allows OAuth2 requests to use excessive memory utilization.Check if you run itEPSS 0.34%Jun 15, 2025
- Medium4.3The Yougler Blogger Profile Page plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, v1.01.Check if you run itEPSS 0.14%Jun 14, 2025
- Medium4.3The AI Image Lab – Free AI Image Generator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.6.Check if you run itEPSS 0.14%Jun 14, 2025
- Medium6.1The Zen Sticky Social plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.3.Check if you run itEPSS 0.13%Jun 14, 2025
- Medium6.1The Easy Flashcards plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.1.Check if you run itEPSS 0.22%Jun 14, 2025
- Medium6.1The WP URL Shortener plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.Check if you run itEPSS 0.13%Jun 14, 2025
- Medium4.3The Seraphinite Accelerator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.27.21.Check if you run itEPSS 0.17%Jun 14, 2025
- Medium4.3The WP Sliding Login/Dashboard Panel plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.1.Check if you run itEPSS 0.14%Jun 13, 2025
- Medium5.3The Digital Marketing and Agency Templates Addons for Elementor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.1.Check if you run itEPSS 0.14%Jun 13, 2025
Sort