Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.3In the Linux kernel, the following vulnerability has been resolved: btrfs: adjust subpage bit start based on sectorsize When running machines with 64k page size and a 16k nodesizeCheck if you run itEPSS 0.22%May 20, 2025
- Critical9.8Cross-Site Request Forgery (CSRF) vulnerability in Danny Vink User Profile Meta Manager user-profile-meta allows Privilege Escalation.This issue affects User Profile Meta Manager:Check if you run itEPSS 0.25%May 19, 2025
- Medium6.4The All in One SEO – Powerful SEO Plugin to Boost SEO Rankings & Increase Traffic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the post Meta Description anCheck if you run itEPSS 0.30%May 19, 2025
- Medium6.9A vulnerability, which was classified as critical, was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0.Check this weekEPSS 70.00%May 16, 2025
- Medium6.9A vulnerability, which was classified as critical, has been found in PHPGurukul Human Metapneumovirus Testing Management System 1.0.Check this weekEPSS 70.00%May 16, 2025
- Medium4.3Missing Authorization vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Exploiting Incorrectly Configured Access Control Security LevelCheck if you run itEPSS 0.24%May 16, 2025
- High7.1An incorrect privilege management vulnerability in the OPSWAT MetaDefender Endpoint Security SDK used by the Palo Alto Networks GlobalProtect™ app on Windows devices allows a localCheck this weekEPSS 16.00%May 14, 2025
- Medium4.3SAP S4CORE OData meta-data property allows an authenticated attacker to access restricted information due to missing authorization check.Check if you run itEPSS 0.31%May 13, 2025
- Medium5.9The Firelight Lightbox WordPress plugin before 2.3.15 does not prevent users with post writing capabilities from executing arbitrary Javascript when the jQuery Metadata library isCheck if you run itEPSS 0.32%May 12, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: return EIO on RAID1 block group write pointer mismatch There was a bug report about a NULL pointerCheck if you run itEPSS 0.19%May 8, 2025
- High8.8The Woocommerce Multiple Addresses plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.0.7.1.Check if you run itEPSS 0.38%May 7, 2025
- Medium6.5HTML injection vulnerability in lemeconsultoria HCM galera.app v.4.58.0 allows an attacker to execute arbitrary code via the .galera.app/ted/solicitacao_treinamento/, .galera.app/rCheck this weekEPSS 52.00%May 7, 2025
- Medium6.9A vulnerability, which was classified as critical, has been found in PHPGurukul Human Metapneumovirus Testing Management System 1.0.Check if you run itEPSS 0.64%May 6, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy() The ioctl helper function nilfs_ioctl_wrap_copy(), whichCheck this weekEPSS 22.00%May 2, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix deadlock in nilfs_count_free_blocks() A semaphore deadlock can occur if nilfs_get_block() detects meCheck this weekEPSS 17.00%May 1, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix use-after-free bug of ns_writer on remount If a nilfs2 filesystem is downgraded to read-only due toCheck this weekEPSS 22.00%May 1, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: jfs: Prevent copying of nlink with value 0 from disk inode syzbot report a deadlock in diFree.Check if you run itEPSS 0.16%May 1, 2025
- Medium4.3The Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider plugin for WordPress is vulnerabCheck if you run itEPSS 0.20%May 1, 2025
- Medium5.3XWiki xwiki Missing AuthorizationPatch nowKEVEPSS 1.05%Apr 30, 2025
- Medium4.8A Reflected Cross-Site Scripting (XSS) vulnerability was discovered in the profile.php file of PHPGurukul Timetable Generator System v1.0.Check if you run itEPSS 0.32%Apr 30, 2025
- Critical9.8Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat.Check if you run itEPSS 4.19%Apr 28, 2025
- Critical10.0IPW Systems Metazo through 8.1.3 allows unauthenticated Remote Code Execution because smartyValidator.php enables the attacker to provide template expressions, aka Server-Side TempCheck if you run itEPSS 0.80%Apr 28, 2025
- Medium5.3A vulnerability was found in Apereo CAS 5.2.6.Check if you run itEPSS 0.64%Apr 27, 2025
- Critical9.1SAP NetWeaver Deserialization VulnerabilityPatch nowKEVEPSS 12.74%Apr 27, 2025
- Medium6.1In IZArc through 4.5, there is a Mark-of-the-Web Bypass Vulnerability.Check if you run itEPSS 0.32%Apr 26, 2025