Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8CryptX for Perl before version 0.065 contains a dependency that may be susceptible to malformed unicode.Check if you run itEPSS 0.41%Jun 11, 2025
- High7.0Mojolicious::Plugin::CSRF 1.03 for Perl uses a weak random number source for generating CSRF tokens.Check if you run itEPSS 0.28%Jun 11, 2025
- Critical9.8Perl CryptX before version 0.087 contains a dependency that may be susceptible to an integer overflow.Check if you run itEPSS 0.54%Jun 11, 2025
- Low3.1Mattermost versions 10.5.x <= 10.5.4, 9.11.x <= 9.11.13 fail to properly restrict API access to team information, allowing guest users to bypass permissions and view information abCheck if you run itEPSS 0.22%Jun 11, 2025
- Medium4.1Mattermost versions 10.7.x <= 10.7.1, 10.6.x <= 10.6.3, 10.5.x <= 10.5.4, 9.11.x <= 9.11.13 fail to properly validate LDAP group ID attributes, allowing an authenticated administraCheck if you run itEPSS 0.28%Jun 11, 2025
- High7.8A vulnerability in the digital signature verification process does not properly validate variable attributes which allows an attacker to bypass signature verification by creating aCheck if you run itEPSS 0.48%Jun 11, 2025
- High8.4IBM AIX 7.3 and IBM VIOS 4.1.1 Perl implementation could allow a non-privileged local user to exploit a vulnerability to execute arbitrary code due to improper neutralization of paCheck if you run itEPSS 0.22%Jun 10, 2025
- Medium4.8SolarWinds Observability Self-Hosted is susceptible to an open redirection vulnerability.Check if you run itEPSS 0.19%Jun 10, 2025
- High7.5The inprosysmedia-likes-dislikes-post WordPress plugin through 1.0.0 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action availabCheck if you run itEPSS 0.55%Jun 10, 2025
- High8.7CyberData 011209 Intercom does not properly store or protect web server admin credentials.Check if you run itEPSS 0.42%Jun 9, 2025
- Medium6.5Missing Authorization vulnerability in relentlo StyleAI relentlosoftware allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects StyleAI: from n/a througCheck if you run itEPSS 0.24%Jun 9, 2025
- High7.5Missing Authorization vulnerability in WP Swings Membership For WooCommerce membership-for-woocommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue afCheck if you run itEPSS 0.34%Jun 9, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: can: bcm: add missing rcu read protection for procfs content When the procfs content is generated for a bcm_op wCheck if you run itEPSS 0.28%Jun 8, 2025
- Low2.7A vulnerability exists in the NodeRestriction admission controller where nodes can bypass dynamic resource allocation authorization checks.Check if you run itEPSS 0.83%Jun 6, 2025
- High8.0WOLFBOX Level 2 EV Charger MCU Command Parsing Misinterpretation of Input Remote Code Execution Vulnerability.Check if you run itEPSS 0.37%Jun 6, 2025
- Medium5.3Missing Authorization vulnerability in centangle Direct Checkout for WooCommerce Lite woo-direct-checkout-lite allows Accessing Functionality Not Properly Constrained by ACLs.ThisCheck this weekEPSS 32.00%Jun 6, 2025
- Medium5.3Missing Authorization vulnerability in OLIVESYSTEM 診断ジェネレータ作成プラグイン os-diagnosis-generator allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects 診断ジェネレーCheck if you run itEPSS 0.30%Jun 6, 2025
- Medium5.3Missing Authorization vulnerability in taskbuilder Taskbuilder taskbuilder allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Taskbuilder: from n/aCheck if you run itEPSS 0.34%Jun 6, 2025
- Medium5.3Missing Authorization vulnerability in Mario Peshev WP-CRM System wp-crm-system allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP-CRM System: frCheck if you run itEPSS 0.32%Jun 6, 2025
- Medium5.3Missing Authorization vulnerability in raychat Raychat raychat allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Raychat: from n/a through <= 2.1.0Check if you run itEPSS 0.32%Jun 6, 2025
- High8.3Uncontrolled resource consumption vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04.Check if you run itEPSS 0.25%Jun 6, 2025
- High8.8The Short URL WordPress plugin through 1.6.8 does not properly sanitise and escape a parameter before using it in SQL statement, leading to a SQL injection exploitable by users witCheck if you run itEPSS 0.44%Jun 6, 2025
- High8.8File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when encounters a crafted filename.Check if you run itEPSS 0.80%Jun 5, 2025
- Medium4.6IGEL OS Use of a Key Past its Expiration Date VulnerabilityPatch nowKEVEPSS 4.93%Jun 5, 2025
- UnknownParagon Software Products Arbitrary Kernel Memory Write VulnerabilityPatch nowKEVEPSS 0.37%Jun 5, 2025