Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.9In the anode crate 0.1.0 for Rust, data races can occur in unlock in SpinLock.Check this weekEPSS 25.00%May 24, 2025
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ApusTheme Ogami ogami allows PHP Local File Inclusion.ThisCheck if you run itEPSS 0.78%May 23, 2025
- High8.0A double-free condition occurs during the cleanup of temporary image files, which can be exploited to achieve memory corruption and potentially arbitrary code execution.Check this weekEPSS 26.00%May 23, 2025
- Critical9.1PrinterShare Android application allows the capture of Gmail authentication tokens that can be reused to access a user's Gmail account without proper authorization.Check this weekEPSS 30.00%May 23, 2025
- Critical9.8An Out of Bounds Write occurs when the native library attempts PDF rendering, which can be exploited to achieve memory corruption and potentially arbitrary code execution.Check this weekEPSS 69.00%May 23, 2025
- Medium4.8A vulnerability classified as problematic was found in moonlightL hexo-boot 4.3.0.Check this weekEPSS 44.00%May 21, 2025
- High7.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Amir Helzer Absolute Links absolute-links allows Blind SQL Injection.This issuCheck if you run itEPSS 0.35%May 19, 2025
- Medium6.0ConnectWise-Password-Encryption-Utility.exe in ConnectWise Risk Assessment allows an attacker to extract a hardcoded AES decryption key via reverse engineering.Check if you run itEPSS 0.11%May 19, 2025
- Medium5.4Cross-Site Request Forgery (CSRF) vulnerability in RedefiningTheWeb Dynamic Pricing & Discounts Lite for WooCommerce woo-dynamic-pricing-discounts-lite allows Cross Site Request FoCheck if you run itEPSS 0.15%May 19, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in videowhisper Broadcast Live Video videowhisper-live-streaming-integration allows Cross Site Request Forgery.This issue affects BrCheck if you run itEPSS 0.19%May 19, 2025
- High7.8Untrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to 2.38 allows attacker controlled loading of dynamically shared library in staticallCheck if you run itEPSS 0.59%May 16, 2025
- Medium4.3The GamiPress WordPress plugin before 1.0.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSCheck this weekEPSS 19.00%May 15, 2025
- Medium5.4The If-So Dynamic Content Personalization WordPress plugin before 1.8.0.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post wCheck this weekEPSS 32.00%May 15, 2025
- Medium6.9A vulnerability was found in projectworlds Online Examination System 1.0.Check this weekEPSS 56.00%May 15, 2025
- Medium5.4Incorrect default permissions for some Endurance Gaming Mode software installers may allow an authenticated user to potentially enable escalation of privilege via local access.Check this weekEPSS 14.00%May 13, 2025
- Medium6.3Kirby is an open-source content management system.Check if you run itEPSS 0.59%May 13, 2025
- Medium6.3Kirby is an open-source content management system.Check if you run itEPSS 0.71%May 13, 2025
- High7.5APTIOV contains a vulnerability in BIOS where an attacker may cause a Time-of-check Time-of-use (TOCTOU) Race Condition by local means.Check this weekEPSS 13.00%May 13, 2025
- Critical9.4The bitnami/pgpool Docker image, and the bitnami/postgres-ha k8s chart, under default configurations, comes with an 'repmgr' user that allows unauthenticated access to the databaseCheck this weekEPSS 50.00%May 13, 2025
- High7.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in acowebs Dynamic Pricing With Discount Rules for WooCommerce aco-woo-dynamic-prCheck if you run itEPSS 0.48%May 7, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Ruben Garcia GamiPress gamipress allows PHP Local File InclCheck if you run itEPSS 0.77%May 7, 2025
- Medium4.7URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks WP Gravity Forms Dynamics CRM gf-dynamics-crm allows Phishing.This issue affects WP Gravity Forms DynCheck if you run itEPSS 0.32%May 7, 2025
- High7.6Cross-Site Scripting vulnerability in lemeconsultoria HCM galera.app v.4.58.0 allows an attacker to execute arbitrary code via multiple components, including Strategic Planning PerCheck this weekEPSS 43.00%May 7, 2025
- Medium5.3A vulnerability has been found in kefaming mayi up to 1.3.9 and classified as critical.Check if you run itEPSS 0.33%May 6, 2025
- Medium5.5NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it allows a guest to consume uncontrolled resources.Check this weekEPSS 16.00%May 1, 2025