Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Missing Authorization vulnerability in sminozzi Stop and Block bots plugin Anti bots antibots allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects StoCheck this weekEPSS 31.00%Jul 16, 2025
- Medium6.7A flaw was found in polkit.Check this weekEPSS 22.00%Jul 14, 2025
- Medium4.8A stored Cross-Site Scripting (XSS) vulnerability exists in the Access Control of ADM, the issue allows an attacker to inject malicious scripts into the folder name field while creCheck this weekEPSS 33.00%Jul 14, 2025
- Critical9.3Emerson ValveLink Products store sensitive information in cleartext in memory.Check this weekEPSS 39.00%Jul 10, 2025
- High8.7A vulnerability exists in Advantech iView that could allow SQL injection and remote code execution through NetworkServlet.archiveTrapRange().Check this weekEPSS 61.00%Jul 10, 2025
- High8.7A vulnerability exists in Advantech iView that could allow for SQL injection and remote code execution through NetworkServlet.getNextTrapPage().Check if you run itEPSS 7.43%Jul 10, 2025
- Medium5.3A vulnerability exists in Advantech iView in NetworkServlet.processImportRequest() that could allow for a directory traversal attack.Check if you run itEPSS 5.68%Jul 10, 2025
- Critical9.3An unauthenticated command injection vulnerability exists in VICIdial versions 2.9 RC1 through 2.13 RC1, within the vicidial_sales_viewer.php component when password encryption isCheck if you run itEPSS 1.64%Jul 10, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Use memcpy() for BIOS version The strlcat() with FORTIFY support is triggering a panic because it thCheck this weekEPSS 20.00%Jul 10, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: bnxt: properly flush XDP redirect lists We encountered following crash when testing a XDP_REDIRECT feature in prCheck if you run itEPSS 0.34%Jul 9, 2025
- Critical9.8Unverified Password ChangePatch nowKEVEPSS 0.66%Jul 9, 2025
- Medium4.9An Improperly Implemented Security Check for Standard vulnerability [CWE-358] in FortiOS version 7.6.0, version 7.4.7 and below, 7.0 all versions, 6.4 all versions and FortiProxy vCheck this weekEPSS 40.00%Jul 8, 2025
- Medium5.3A vulnerability has been identified in TIA Project-Server (All versions < V2.1.1), TIA Project-Server V17 (All versions), Totally Integrated Automation Portal (TIA Portal) V17 (AllCheck this weekEPSS 33.00%Jul 8, 2025
- High7.3The The Woodmart theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 8.2.3.Check this weekEPSS 49.00%Jul 8, 2025
- Critical9.8WeGIA is a web manager for charitable institutions.Check this weekEPSS 56.00%Jul 7, 2025
- Medium5.4The WikiCategoryTagCloud extension is vulnerable to reflected XSS via the linkstyle attribute, which is improperly concatenated into inline HTML without escaping.Check this weekEPSS 29.00%Jul 7, 2025
- High8.1A flaw was found in libssh when using the ChaCha20 cipher with the OpenSSL library.Check if you run itEPSS 1.73%Jul 7, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: jfs: validate AG parameters in dbMount() to prevent crashes Validate db_agheight, db_agwidth, and db_agstart inCheck this weekEPSS 19.00%Jul 4, 2025
- High8.6Short Description is a MediaWiki extension that provides local short description support.Check this weekEPSS 34.00%Jul 3, 2025
- Critical9.0An authenticated command injection vulnerability exists in Pi-hole versions up to 3.3.Check if you run itEPSS 6.88%Jul 3, 2025
- High8.8Improper Access Control vulnerability in Wikimedia Foundation Mediawiki - Scribunto Extension allows : Accessing Functionality Not Properly Constrained by Authorization.This issueCheck this weekEPSS 38.00%Jul 3, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: perf: arm-ni: Unregister PMUs on probe failure When a resource allocation fails in one clock domain of an NI devCheck if you run itEPSS 0.17%Jul 3, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction Upon RQ destruction if the firmware command fCheck if you run itEPSS 0.18%Jul 3, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix uaf in ath12k_core_init() When the execution of ath12k_core_hw_group_assign() or ath12k_core_hCheck this weekEPSS 19.00%Jul 3, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: net_sched: sch_sfq: fix a potential crash on gso_skb handling SFQ has an assumption of always being able to queuCheck if you run itEPSS 0.22%Jul 3, 2025