Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in e4jvikwp VikRestaurants vikrestaurants allows Cross Site Request Forgery.This issue affects VikRestaurants: from n/a through <= 1Check if you run itEPSS 0.16%Apr 22, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Michael Simple calendar for Elementor simple-calendar-for-elementor allows Cross Site Request Forgery.This issue affects Simple cCheck if you run itEPSS 0.18%Apr 22, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in CreativeMindsSolutions CM Answers cm-answers allows Cross Site Request Forgery.This issue affects CM Answers: from n/a through <=Check if you run itEPSS 0.18%Apr 22, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in CreativeMindsSolutions CM Ad Changer cm-ad-changer allows Cross Site Request Forgery.This issue affects CM Ad Changer: from n/a tCheck if you run itEPSS 0.18%Apr 22, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in sonalsinha21 Recover abandoned cart for WooCommerce recover-wc-abandoned-cart allows Cross Site Request Forgery.This issue affectCheck if you run itEPSS 0.18%Apr 22, 2025
- High8.2Cross-Site Request Forgery (CSRF) vulnerability in codepeople Appointment Booking Calendar appointment-booking-calendar allows SQL Injection.This issue affects Appointment BookingCheck if you run itEPSS 0.19%Apr 22, 2025
- Medium5.4Cross-Site Request Forgery (CSRF) vulnerability in SERVIT Software Solutions affiliate-toolkit affiliate-toolkit-starter allows Cross Site Request Forgery.This issue affects affiliCheck if you run itEPSS 0.17%Apr 22, 2025
- Medium5.3It technically possible for a user to upload a file to a conversation despite the file upload functionality being disabled.Check if you run itEPSS 0.25%Apr 22, 2025
- High8.8The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the gspb_make_proxy_api_requeCheck if you run itEPSS 2.57%Apr 22, 2025
- Medium4.9**UNSUPPORTED WHEN ASSIGNED** A path traversal vulnerability in the web management interface of the Zyxel AMG1302-T10B firmware version 2.00(AAJC.16)C0 could allow an authenticatedCheck this weekEPSS 12.62%Apr 22, 2025
- High8.6A vulnerability, which was classified as critical, was found in H3C GR-3000AX up to V100R006.Check if you run itEPSS 0.52%Apr 22, 2025
- Critical9.8LabVantage before LV 8.8.0.13 HF6 allows local file inclusion.Check if you run itEPSS 0.47%Apr 22, 2025
- High7.5An issue in UPF in Open5GS UPF versions up to v2.7.2 results an assertion failure vulnerability in PFCP session parameter validation.Check if you run itEPSS 0.79%Apr 22, 2025
- High7.3NEXTU FLETA AX1500 WIFI6 Router v1.0.3 was discovered to contain a stack overflow via the url parameter at /boafrm/formFilter.Check if you run itEPSS 0.47%Apr 22, 2025
- High7.7An issue in OpenResty lua-nginx-module v.0.10.26 and before allows a remote attacker to conduct HTTP request smuggling via a crafted HEAD request.Check if you run itEPSS 0.85%Apr 22, 2025
- Critical9.8An issue in Student Study Center Desk Management System v1.0 allows attackers to bypass authentication via a crafted GET request to /php-sscdms/admin/login.php.Check if you run itEPSS 0.68%Apr 22, 2025
- UnknownSAP NetWeaver Deserialization of Untrusted DataPatch nowKEVEPSS 5.37%Apr 22, 2025
- Low3.8IBM Maximo Asset Management 7.6.1.3 is vulnerable to server-side request forgery (SSRF).Check if you run itEPSS 0.22%Apr 21, 2025
- Medium6.9A vulnerability classified as critical has been found in markparticle WebServer up to 1.0.Check if you run itEPSS 0.51%Apr 21, 2025
- Medium6.9A vulnerability was found in markparticle WebServer up to 1.0.Check if you run itEPSS 0.51%Apr 21, 2025
- Medium5.3A vulnerability was found in panhainan DS-Java 1.0.Check if you run itEPSS 0.33%Apr 21, 2025
- High8.8Traefik (pronounced traffic) is an HTTP reverse proxy and load balancer.Check if you run itEPSS 0.95%Apr 21, 2025
- Medium6.1An improper input validation vulnerability is identified in the End of Life (EOL) OVA based connect component which is deployed for installation purposes in the customer internal nCheck if you run itEPSS 0.33%Apr 21, 2025
- Critical9.8A vulnerability exists in the daemon process of the Yi IOT XY-3820 v6.0.24.10, which exposes a TCP service on port 6789.Check if you run itEPSS 1.26%Apr 21, 2025
- Medium6.4Incorrect access control in laskBlog v2.6.1 allows attackers to arbitrarily delete user accounts via a crafted request.Check if you run itEPSS 0.22%Apr 21, 2025
Sort