Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Cross-Site Request Forgery (CSRF) vulnerability in tomontoast Drop Caps drop-caps allows Stored XSS.This issue affects Drop Caps: from n/a through <= 2.1.Check if you run itEPSS 0.14%Apr 24, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in Pham Thanh Call Now PHT Blog call-now-coccoc-pht-blog allows Stored XSS.This issue affects Call Now PHT Blog: from n/a through <=Check if you run itEPSS 0.15%Apr 24, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in felixtz Modern Polls modern-polls allows Stored XSS.This issue affects Modern Polls: from n/a through <= 1.0.10.Check if you run itEPSS 0.15%Apr 24, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in John Weissberg Print Science Designer print-science-designer allows Stored XSS.This issue affects Print Science Designer: from n/Check if you run itEPSS 0.15%Apr 24, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Trân Minh-Quân WPVN wpvn-username-changer allows Cross Site Request Forgery.This issue affects WPVN: from n/a through <= 0.7.8.Check if you run itEPSS 0.17%Apr 24, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in Olav Kolbu Google News allows Stored XSS.Check if you run itEPSS 0.15%Apr 24, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in x000x occupancyplan occupancyplan allows Stored XSS.This issue affects occupancyplan: from n/a through <= 1.0.3.0.Check if you run itEPSS 0.15%Apr 24, 2025
- Medium4.9Server-Side Request Forgery (SSRF) vulnerability in Adam Pery Animate animate allows Server Side Request Forgery.This issue affects Animate: from n/a through <= 0.5.Check if you run itEPSS 0.22%Apr 24, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Sebastian Echeverry SCSS-Library scss-library allows Cross Site Request Forgery.This issue affects SCSS-Library: from n/a throughCheck if you run itEPSS 0.17%Apr 24, 2025
- High7.4Cross-Site Request Forgery (CSRF) vulnerability in Vladimir Prelovac Plugin Central plugin-central allows Path Traversal.This issue affects Plugin Central: from n/a through <= 2.5.Check if you run itEPSS 0.19%Apr 24, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in Yash Binani Time Based Greeting time-based-greeting allows Stored XSS.This issue affects Time Based Greeting: from n/a through <=Check if you run itEPSS 0.15%Apr 24, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in Kiotviet KiotViet Sync allows Stored XSS.Check if you run itEPSS 0.15%Apr 24, 2025
- High7.2Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Centreon centreon-web (User configuration form modules) allows SQL Injection.Check if you run itEPSS 0.40%Apr 24, 2025
- Medium4.3IBM InfoSphere Information 11.7 Server authenticated user to obtain sensitive information when a detailed technical error message is returned in a request.Check if you run itEPSS 0.30%Apr 23, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Drupal Search API Solr allows Cross Site Request Forgery.This issue affects Search API Solr: from 0.0.0 before 4.3.9.Check if you run itEPSS 0.15%Apr 23, 2025
- High7.1PostHog database_schema Server-Side Request Forgery Information Disclosure Vulnerability.Check if you run itEPSS 0.64%Apr 23, 2025
- High7.1PostHog slack_incoming_webhook Server-Side Request Forgery Information Disclosure Vulnerability.Check if you run itEPSS 0.67%Apr 23, 2025
- Critical9.3This vulnerability exists in Meon Bidding Solutions due to improper authorization controls on certain API endpoints for the initiation, modification, or cancellation operations.Check if you run itEPSS 0.49%Apr 23, 2025
- High8.2This vulnerability exists in Meon KYC solutions due to improper handling of access and refresh tokens in certain API endpoints of authentication process.Check if you run itEPSS 0.43%Apr 23, 2025
- High8.2This vulnerability exists in Meon KYC solutions due to insufficient server-side validation of the Captcha in certain API endpoints.Check if you run itEPSS 0.43%Apr 23, 2025
- Medium5.4A vulnerability was found in mod_proxy_cluster.Check if you run itEPSS 0.38%Apr 23, 2025
- Medium4.3NIH BRICS (aka Biomedical Research Informatics Computing System) through 14.0.0-67 allows users who lack the InET role to access the InET module via direct requests to known endpoiCheck if you run itEPSS 0.38%Apr 23, 2025
- Medium4.6SAP Learning Solution is vulnerable to Cross-Site Request Forgery (CSRF), allowing an attacker to trick authenticated user into sending unintended requests to the server.Check if you run itEPSS 0.14%Apr 22, 2025
- Medium6.4The Cuba JPA web API enables loading and saving any entities defined in the application data model by sending simple HTTP requests.Check if you run itEPSS 0.33%Apr 22, 2025
- Medium4.1IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to server-side request forgery (SSRF).Check if you run itEPSS 0.35%Apr 22, 2025
Sort