Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3The AHAthat Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.6.Check if you run itEPSS 0.15%May 6, 2025
- High7.5cpp-httplib is a C++ header-only HTTP/HTTPS server and client library.Check if you run itEPSS 0.66%May 6, 2025
- Medium5.5MrDoc v0.95 and before is vulnerable to Server-Side Request Forgery (SSRF) in the validate_url function of the app_doc/utils.py file.Check if you run itEPSS 0.29%May 6, 2025
- Critical9.8The BuddyBoss Platform Pro plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.7.01.Check if you run itEPSS 0.66%May 5, 2025
- Medium5.4HCL BigFix Compliance is affected by an improper or missing SameSite attribute.Check if you run itEPSS 0.24%May 5, 2025
- Medium5.4Misskey is an open source, federated social media platform.Check if you run itEPSS 0.45%May 5, 2025
- Low2.1@misskey-dev/summaly is a tool for getting a summary of a web page.Check if you run itEPSS 0.26%May 5, 2025
- Medium5.3A vulnerability has been found in SourceCodester/oretnom23 Stock Management System 1.0 and classified as problematic.Check if you run itEPSS 0.35%May 5, 2025
- Medium4.3Improper access control in PAM feature in Devolutions Server allows a PAM user to self approve their PAM requests even if disallowed by the configured policy via specific user inteCheck if you run itEPSS 0.37%May 5, 2025
- Low2.3Vulnerability in Best Practical Solutions, LLC's Request Tracker prior to v5.0.8, where the Triple DES (3DES) cryptographic algorithm is used to protect emails sent with S/MIME encCheck if you run itEPSS 0.19%May 5, 2025
- Critical9.8Incorrect access control in the /admin/** API of brcc v1.2.0 allows attackers to gain access to Admin rights via a crafted request.Check if you run itEPSS 0.45%May 5, 2025
- Critical9.8Incorrect access control in the /admin/ API of yaoqishan v0.0.1-SNAPSHOT allows attackers to gain access to Admin rights via a crafted request.Check if you run itEPSS 0.45%May 5, 2025
- Critical9.8Incorrect access control in xmall v1.1 allows attackers to bypass authentication via a crafted GET request to /index.Check if you run itEPSS 0.54%May 5, 2025
- Critical9.8Incorrect access control in the /user/edit/ component of hope-boot v1.0.0 allows attackers to bypass authentication via a crafted GET request.Check if you run itEPSS 0.53%May 5, 2025
- Critical9.8An issue in the component /manage/ of itranswarp v2.19 allows attackers to bypass authentication via a crafted request.Check if you run itEPSS 0.54%May 5, 2025
- Critical9.8kashipara Online Service Management Portal V1.0 is vulnerable to SQL Injection in osms/Requester/CheckStatus.php via the checkid parameter.Check if you run itEPSS 0.48%May 5, 2025
- High8.8kashipara Online Service Management Portal V1.0 is vulnerable to SQL Injection in /osms/Requester/Requesterchangepass.php via the parameter: rPassword.Check if you run itEPSS 0.48%May 5, 2025
- High7.5A Directory Listing Vulnerability was found in the /osms/Requester/ directory of the Kashipara Online Service Management Portal V1.0.Check if you run itEPSS 0.40%May 5, 2025
- Critical9.8SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component phomebak.php.Check if you run itEPSS 1.03%May 5, 2025
- Medium6.4The Multiple File Upload add-on component 3.1.0 for OutSystems is vulnerable to Unrestricted File Upload.Check if you run itEPSS 0.34%May 5, 2025
- High8.1A Cross-Site Request Forgery (CSRF) vulnerability was discovered in ERPNEXT 14.82.1 and 14.74.3.Check if you run itEPSS 0.80%May 5, 2025
- High8.6In the Linux kernel, the following vulnerability has been resolved: vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp vmxnet3 driver's XDP handling is buggy for packet siCheck if you run itEPSS 0.36%May 3, 2025
- Medium6.1The Abundatrade Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.8.02.Check if you run itEPSS 0.18%May 3, 2025
- Medium6.1The Alink Tap plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.1.Check if you run itEPSS 0.18%May 3, 2025
- Medium6.1The Advanced Reorder Image Text Slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.Check if you run itEPSS 0.18%May 3, 2025
Sort