Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownParagon Software Products Arbitrary Kernel Memory Mapping VulnerabilityPatch nowKEVEPSS 0.34%Jun 5, 2025
- High7.7The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications.Check if you run itEPSS 0.43%Jun 4, 2025
- Medium6.7FreshRSS is a self-hosted RSS feed aggregator.Check if you run itEPSS 0.46%Jun 4, 2025
- Critical9.9A vulnerability in Amazon Web Services (AWS), Microsoft Azure, and Oracle Cloud Infrastructure (OCI) cloud deployments of Cisco Identity Services Engine (ISE) could allow an unauthCheck if you run itEPSS 1.11%Jun 4, 2025
- High8.9CVE-2025-1701 is a high-severity vulnerability in the MIM Admin service.Check if you run itEPSS 0.73%Jun 4, 2025
- High8.8The Sunshine Photo Cart: Free Client Photo Galleries for Photographers plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and inCheck if you run itEPSS 0.56%Jun 4, 2025
- Critical9.8The File Provider WordPress plugin through 1.2.3 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticateCheck if you run itEPSS 0.56%Jun 4, 2025
- Medium6.5IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could allow an authenticated user to cause a denial of service due toCheck this weekEPSS 43.00%Jun 3, 2025
- Medium6.5If you enable Basic Authentication in Pekko Management using the Java DSL, the authenticator may not be properly applied.Check if you run itEPSS 0.75%Jun 3, 2025
- Critical9.8The Golo - City Travel Guide WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.7.0.Check if you run itEPSS 0.50%Jun 3, 2025
- Medium6.4The WordPress Comments Import & Export plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_settings function in alCheck if you run itEPSS 0.29%Jun 2, 2025
- Medium6.5Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Accessing Functionality Not Properly ConstrainedCheck if you run itEPSS 0.28%Jun 2, 2025
- High7.2MyBB is free and open source forum software.Check if you run itEPSS 0.54%Jun 2, 2025
- Medium4.1The WP-Optimize WordPress plugin before 4.2.0 does not properly escape user input when checking image compression statuses, which could allow users with the administrator role to cCheck if you run itEPSS 0.32%Jun 2, 2025
- High7.3A time-based SQL injection vulnerability exists in mydetailsstudent.php in the CloudClassroom PHP Project 1.0.Check if you run itEPSS 0.24%Jun 2, 2025
- Low3.1Mattermost versions 10.7.x <= 10.7.0, 10.5.x <= 10.5.3, 9.11.x <= 9.11.12 fail to properly enforce access controls for guest users accessing channel member information, allowing auCheck this weekEPSS 24.00%May 30, 2025
- Medium5.9ALAS-2025-1981 (medium): perlCheck if you run itEPSS 0.50%May 30, 2025
- Medium5.3Mattermost versions 10.7.x <= 10.7.0, 10.6.x <= 10.6.2, 10.5.x <= 10.5.3, 9.11.x <= 9.11.12 fail to properly validate permissions when changing team privacy settings, allowing teamCheck this weekEPSS 31.00%May 29, 2025
- Medium6.9CVE-2025-27702 is a vulnerability in the management console of Absolute Secure Access prior to version 13.54.Check this weekEPSS 31.00%May 28, 2025
- Medium5.4SummaryThis advisory addresses an Open Redirection vulnerability in Mautic's user unlocking endpoint.Check this weekEPSS 24.00%May 28, 2025
- Medium6.5On affected platforms running Arista EOS, ingress traffic on Layer 2 ports may, under certain conditions, be improperly forwarded to ports associated with different VLANs, resultinCheck this weekEPSS 26.00%May 27, 2025
- Medium6.5Net::CIDR::Set versions 0.10 through 0.13 for Perl does not properly handle leading zero characters in IP CIDR address strings, which could allow attackers to bypass access controlCheck this weekEPSS 37.00%May 27, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: net_sched: Flush gso_skb list too during ->change() Previously, when reducing a qdisc's limit via the ->change()Check if you run itEPSS 0.21%May 26, 2025
- High7.5An unauthenticated remote attacker can access a URL which causes the device to reboot.Check this weekEPSS 47.00%May 26, 2025
- High8.2An unauthenticated remote attacker can access information about running processes via the SNMP protocol.Check if you run itEPSS 0.41%May 26, 2025