Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the Message parameter of /Mobile/Compose.aspx.Check if you run itEPSS 0.40%Dec 9, 2025
- High8.2In the Linux kernel, the following vulnerability has been resolved: net: stmmac: Correctly handle Rx checksum offload errors The stmmac_rx function would previously se…Check if you run itEPSS 0.48%Dec 9, 2025
- Critical10.0An integer overflow vulnerability exists in the write method of the Buffer class in Robocode version 1.9.3.6.Check if you run itEPSS 0.58%Dec 9, 2025
- Critical10.0A directory traversal vulnerability exists in the CacheCleaner component of Robocode version 1.9.3.6.Check if you run itEPSS 1.07%Dec 9, 2025
- Medium5.4The weDocs plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 2.1.14.Check if you run itEPSS 0.22%Dec 6, 2025
- Medium4.3Nextcloud Server is a self hosted personal cloud system.Open the advisoryDec 5, 2025
- Critical9.8The Email Verification, Email OTP, Block Spam Email, Passwordless login, Hide Login, Magic Login – User Verification plugin for WordPress is vulnerable to authenticati…Open the advisoryDec 5, 2025
- Medium4.3The Takeads plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.0.13.Open the advisoryDec 5, 2025
- High8.7Advantech iView versions 5.7.05.7057 and prior do not properly sanitize SNMP v1 trap (Port 162) requests, which could allow an attacker to inject SQL commands.Open the advisoryDec 4, 2025
- Low1.8Anthropic Sandbox Runtime is a lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container.Open the advisoryDec 4, 2025
- High8.6The OTP Integration Kit for PingFederate fails to enforce HTTP method validation and state validation properly.Open the advisoryDec 4, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: mm/damon/core: fix potential memory leak by cleaning ops_filter in damon_destroy_scheme Currently,…Open the advisoryDec 4, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: hwmon: (cgbc-hwmon) Add missing NULL check after devm_kzalloc() The driver allocates memory for sen…Open the advisoryDec 4, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: tty: serial: sh-sci: fix RSCI FIFO overrun handling The receive error handling code is shared betwe…Open the advisoryDec 4, 2025
- Medium4.3The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.9.4.Open the advisoryDec 4, 2025
- Medium5.3The WebP Express plugin for WordPress is vulnerable to information exposure via config files in all versions up to, and including, 0.25.9.Open the advisoryDec 4, 2025
- Medium6.5An Improper Input Validation vulnerability exists in the user websocket handler of MAAS.Open the advisoryDec 3, 2025
- Medium4.3The Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.40.1.Open the advisoryDec 3, 2025
- Medium5.4The Post SMTP plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.6.1.Open the advisoryDec 3, 2025
- Unknownmongoosejs mongoose Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 3.98%Nov 27, 2025
- Medium4.8@dependencytrack/frontend is a Single Page Application (SPA) used in Dependency-Track, an open source Component Analysis platform that allows organizations to identify…Open the advisoryNov 17, 2025
- High7.5Apollo Federation is an architecture for declaratively composing APIs into a unified graph.Open the advisoryNov 13, 2025
- High8.8The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to privilege escalation.Open the advisoryNov 13, 2025
- Unknownzentao biz Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.48%Nov 13, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: btrfs: avoid potential out-of-bounds in btrfs_encode_fh() The function btrfs_encode_fh() does not p…Check if you run itEPSS 0.15%Nov 12, 2025