Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3A vulnerability was found in kuangstudy KuangSimpleBBS 1.0.Check if you run itEPSS 0.51%Apr 20, 2025
- Medium5.3A vulnerability has been found in zhenfeng13 My-BBS 1.0 and classified as problematic.Check if you run itEPSS 0.32%Apr 19, 2025
- High7.5The Insert Headers And Footers plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.1.Check if you run itEPSS 0.24%Apr 19, 2025
- Medium4.3The User Registration & Membership – Custom Registration Form, Login Form, and User Profile plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to,Check if you run itEPSS 0.15%Apr 19, 2025
- Medium6.4SSL.com before 2025-04-19, when domain validation method 3.2.2.4.14 is used, processes certificate requests such that a trusted TLS certificate may be issued for the domain name ofCheck if you run itEPSS 0.10%Apr 19, 2025
- Medium4.3In Nessus versions prior to 10.8.4, a non-authenticated attacker could alter Nessus logging entries by manipulating http requests to the application.Check if you run itEPSS 0.29%Apr 18, 2025
- Medium5.3NamelessMC is a free, easy to use & powerful website software for Minecraft servers.Check if you run itEPSS 0.48%Apr 18, 2025
- High7.5NamelessMC is a free, easy to use & powerful website software for Minecraft servers.Check if you run itEPSS 0.66%Apr 18, 2025
- Medium5.4IBM i 7.3, 7.4, 7.5, and 7.5 is vulnerable to a host header injection attack caused by improper neutralization of HTTP header content by IBM Navigator for i.Check if you run itEPSS 0.32%Apr 18, 2025
- Medium5.1A vulnerability was found in PbootCMS 3.2.5.Check if you run itEPSS 0.47%Apr 18, 2025
- Critical9.2ASUS asus_firmware Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 1.13%Apr 18, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: md/raid10: wait barrier before returning discard request with REQ_NOWAIT raid10_handle_discard should wait barriCheck if you run itEPSS 0.25%Apr 18, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: ksmbd: use aead_request_free to match aead_request_alloc Use aead_request_free() instead of kfree() to properlyCheck if you run itEPSS 0.27%Apr 18, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: x86/resctrl: Fix allocation of cleanest CLOSID on platforms with no monitors Commit 6eac36bb9eb0 ("x86/resctrl:Check if you run itEPSS 0.26%Apr 18, 2025
- Medium4.7Volmarg Personal Management System 1.4.65 is vulnerable to Cross Site Request Forgery (CSRF) allowing attackers to execute arbitrary code and obtain sensitive information via the SCheck if you run itEPSS 0.22%Apr 18, 2025
- Critical9.8Qualitia Active! Mail Stack-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 3.36%Apr 17, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in SOFTAGON WooCommerce Products without featured images woocommerce-products-without-featured-images allows Reflected XSS.This issuCheck if you run itEPSS 0.15%Apr 17, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in gtlwpdev All push notification for WP all-push-notification allows Reflected XSS.This issue affects All push notification for WP:Check if you run itEPSS 0.15%Apr 17, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in Deepak Khokhar Listings for Buildium listings-for-buildium allows Stored XSS.This issue affects Listings for Buildium: from n/a tCheck if you run itEPSS 0.15%Apr 17, 2025
- High8.8Deserialization of Untrusted Data vulnerability in PickPlugins Question Answer question-answer allows Object Injection.This issue affects Question Answer: from n/a through <= 1.2.7Check if you run itEPSS 0.49%Apr 17, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins Question Answer question-answer allows Reflected XSS.This issue afCheck if you run itEPSS 0.29%Apr 17, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in DevriX Restrict User Registration restrict-user-registration allows Stored XSS.This issue affects Restrict User Registration: froCheck if you run itEPSS 0.15%Apr 17, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in Jayesh Parejiya Social Media Links social-media-links allows Stored XSS.This issue affects Social Media Links: from n/a through <Check if you run itEPSS 0.15%Apr 17, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in Mike spam-stopper spam-stopper allows Stored XSS.This issue affects spam-stopper: from n/a through <= 3.1.3.Check if you run itEPSS 0.15%Apr 17, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in Ichi translit it! translit-it allows Stored XSS.This issue affects translit it!: from n/a through <= 1.6.Check if you run itEPSS 0.15%Apr 17, 2025
Sort