Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.9Samsung Internet for Galaxy Watch version 5.0.9, available up until Samsung Galaxy Watch 3, does not properly validate TLS certificates, allowing for an attacker to impersonate anyCheck this weekEPSS 30.00%May 16, 2025
- Medium6.4The EventPrime WordPress plugin before 3.5.0 does not properly validate permissions when updating bookings, allowing users to change/cancel bookings for other users.Check this weekEPSS 31.00%May 15, 2025
- Medium6.8The Genesis Blocks WordPress plugin through 3.1.3 does not properly escape attributes provided to some of its custom blocks, making it possible for users allowed to write posts (liCheck this weekEPSS 58.00%May 15, 2025
- High7.2The Z-Downloads WordPress plugin before 1.11.5 does not properly validate files uploaded, allowing high privilege users such as admin to upload arbitrary files on the server even wCheck this weekEPSS 70.00%May 15, 2025
- Critical9.1The Z-Downloads WordPress plugin before 1.11.7 does not properly validate uploaded files allowing for the uploading of SVGs containing malicious JavaScript.Check if you run itEPSS 1.81%May 15, 2025
- Medium5.4The webtoffee-gdpr-cookie-consent WordPress plugin before 2.6.1 does not properly sanitize and escape the IP headers when logging them, allowing visitors to conduct Stored Cross-SiCheck this weekEPSS 33.00%May 15, 2025
- Medium6.5The Secure Downloads WordPress plugin before 1.2.3 is vulnerable does not properly restrict which files can be downloaded.Check this weekEPSS 53.00%May 15, 2025
- Critical9.8The Simple Video Directory WordPress plugin before 1.4.3 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthCheck this weekEPSS 68.00%May 15, 2025
- Critical9.8The Push Notification for Post and BuddyPress WordPress plugin before 1.9.4 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX actionCheck if you run itEPSS 2.79%May 15, 2025
- Critical9.4Atheos is a self-hosted browser-based cloud IDE.Check if you run itEPSS 0.49%May 15, 2025
- High8.9Emlog is an open source website building system.Check if you run itEPSS 0.77%May 15, 2025
- Low2.9Vyper is the Pythonic Programming Language for the Ethereum Virtual Machine.Check this weekEPSS 48.00%May 15, 2025
- Low2.9Vyper is the Pythonic Programming Language for the Ethereum Virtual Machine.Check this weekEPSS 46.00%May 15, 2025
- Medium4.3Mattermost versions 10.5.x <= 10.5.2, 9.11.x <= 9.11.11 failed to properly verify a user's permissions when accessing groups, which allows an attacker to view group information viaCheck this weekEPSS 31.00%May 15, 2025
- Medium6.6net-tools is a collection of programs that form the base set of the NET-3 networking distribution for the Linux operating system.Check if you run itEPSS 0.20%May 14, 2025
- Medium5.9Sensitive data storage in improperly locked memory in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network.Check this weekEPSS 32.74%May 13, 2025
- High8.4The content of a SVG file, received as input in Centreon web, was not properly checked.Check if you run itEPSS 0.27%May 13, 2025
- High8.5A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V2.1 HF0 with SINEMA Remote Connect Edge Client installed).Check if you run itEPSS 0.19%May 13, 2025
- Medium5.3A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions).Check if you run itEPSS 0.28%May 13, 2025
- Medium5.3A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0).Check if you run itEPSS 0.28%May 13, 2025
- Medium5.3A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0).Check if you run itEPSS 0.28%May 13, 2025
- Medium5.3A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0).Check if you run itEPSS 0.48%May 13, 2025
- High8.5A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0).Check if you run itEPSS 0.14%May 13, 2025
- Medium6.8A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0).Check if you run itEPSS 0.14%May 13, 2025
- High7.1A vulnerability has been identified in BACnet ATEC 550-440 (All versions), BACnet ATEC 550-441 (All versions), BACnet ATEC 550-445 (All versions), BACnet ATEC 550-446 (All versionsCheck if you run itEPSS 0.25%May 13, 2025