Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1Due to improper neutralization of input during web page generation (XSS) an unauthenticated remote attacker can inject HTML code into the Web-UI in the affected device.Check this weekEPSS 30.00%May 26, 2025
- Medium5.3A vulnerability was found in docarray up to 0.40.1.Check this weekEPSS 69.00%May 25, 2025
- Medium5.9A vulnerability has been identified in Building X - Security Manager Edge Controller (ACC-AP) (All versions).Check this weekEPSS 16.00%May 23, 2025
- High8.7On MOBOTIX P3 cameras before MX-V4.7.2.18 and Mx6 cameras before MX-V5.2.0.61, the tcpdump feature does not properly validate input, which allows authenticated users to execute codCheck this weekEPSS 46.00%May 23, 2025
- Medium5.6wire-webapp is the web application for the open-source messaging service Wire.Check this weekEPSS 14.00%May 22, 2025
- High7.5mapsvg mapsvg Missing AuthorizationPatch nowKEVEPSS 0.43%May 22, 2025
- Critical9.3Affected Vertiv products do not properly protect webserver functions that could allow an attacker to bypass authentication.Check this weekEPSS 58.00%May 21, 2025
- Medium6.6ejson2env allows users to decrypt EJSON secrets and export them as environment variables.Check if you run itEPSS 1.42%May 21, 2025
- Medium6.1A Stored Cross-Site Scripting (XSS) vulnerability exists in Vtiger CRM Open Source Edition v8.3.0, exploitable via the Services Import feature.Check this weekEPSS 31.00%May 21, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: block: fix resource leak in blk_register_queue() error path When registering a queue fails after blk_mq_sysfs_reCheck if you run itEPSS 0.19%May 20, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: avoid NULL pointer dereference in skb_dequeue() A NULL pointer dereference can occur in skb_deCheck if you run itEPSS 0.25%May 20, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Balance device refcount when destroying devices Using device_find_child() to lookup the propCheck if you run itEPSS 0.21%May 20, 2025
- High7.5Missing Authorization vulnerability in Crocoblock JetBlocks For Elementor jet-blocks allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects JetBlocks FoCheck if you run itEPSS 0.36%May 19, 2025
- Medium5.3Missing Authorization vulnerability in Themes4WP Bulk allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Bulk: from n/a through 1.0.11.Check this weekEPSS 27.00%May 19, 2025
- Medium5.3Missing Authorization vulnerability in Embed360 Embed and Integrate Etsy Shop embed-and-integrate-etsy-shop allows Accessing Functionality Not Properly Constrained by ACLs.This issCheck if you run itEPSS 0.27%May 19, 2025
- Low2.1a-blog cms multiple versions neutralize logs improperly.Check this weekEPSS 40.00%May 19, 2025
- Critical9.8Unverified Password ChangePatch nowKEVEPSS 15.20%May 19, 2025
- High7.2The CSV Mass Importer WordPress plugin through 1.2 does not properly validate uploaded files, allowing high privilege users such as admin to upload arbitrary files on the server evCheck this weekEPSS 58.00%May 17, 2025
- Medium5.3Missing Authorization vulnerability in villatheme CURCY woocommerce-multi-currency allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects CURCY: from n/Check if you run itEPSS 0.34%May 16, 2025
- Medium5.3Missing Authorization vulnerability in ashanjay EventON eventon allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects EventON: from n/a through <= 4.9.Check if you run itEPSS 0.42%May 16, 2025
- Medium5.3Missing Authorization vulnerability in Ashan Perera EventON eventon-lite allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects EventON: from n/a througCheck if you run itEPSS 0.34%May 16, 2025
- Critical9.8BSON::XS versions 0.8.4 and earlier for Perl includes a bundled libbson 1.1.7, which has several vulnerabilities.Check if you run itEPSS 0.64%May 16, 2025
- Medium5.3FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library.Check if you run itEPSS 0.68%May 16, 2025
- High8.7PNETLab 4.2.10 does not properly sanitize user inputs in its file access mechanisms.Check this weekEPSS 83.00%May 16, 2025
- UnknownArbitrary Code Execution (ACE) VulnerabilityOpen the advisoryMay 16, 2025