Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1A vulnerability has been identified in MS/TP Point Pickup Module (All versions).Check this weekEPSS 27.00%May 13, 2025
- Medium5.1A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.4).Check this weekEPSS 34.00%May 13, 2025
- High8.3code-server runs VS Code on any machine anywhere through browser access.Check this weekEPSS 44.54%May 9, 2025
- Critical9.8The IMITHEMES Listing plugin is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.3.Check if you run itEPSS 0.83%May 9, 2025
- Critical9.8Authorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 7.44%May 9, 2025
- Critical9.8The WPBookit plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.0.2.Check if you run itEPSS 0.75%May 9, 2025
- Critical9.8The WPBookit plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.0.2.Check if you run itEPSS 0.75%May 9, 2025
- High7.3The Wolmart | Multi-Vendor Marketplace WooCommerce Theme theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.8.11.Check this weekEPSS 42.00%May 8, 2025
- Low2.0i-Educar is free, fully online school management software.Check this weekEPSS 26.00%May 7, 2025
- Medium5.3Missing Authorization vulnerability in CyberChimps Responsive Plus responsive-add-ons allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects ResponsiveCheck if you run itEPSS 0.37%May 7, 2025
- Medium5.3Missing Authorization vulnerability in dgamoni LocateAndFilter locateandfilter allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects LocateAndFilter: fCheck if you run itEPSS 0.36%May 7, 2025
- Medium6.9Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ.Check if you run itEPSS 8.96%May 7, 2025
- Medium6.0The MQTT add-on of PcVue fails to verify that a remote device’s certificate has not already expired or has not yet become valid.Check if you run itEPSS 0.13%May 6, 2025
- High8.2Unrestricted Upload of File with Dangerous Type, Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Netoloji Software E-FlCheck this weekEPSS 33.00%May 6, 2025
- High7.3The LayoutBoxx plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 0.3.1.Check if you run itEPSS 0.52%May 6, 2025
- High8.8The Reales WP STPT plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.1.2.Check if you run itEPSS 0.64%May 6, 2025
- Medium5.3The Envolve Plugin plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including, 1.0 via the 'zetra_deleteLanguageFile' and 'zetra_deleteFontsCheck this weekEPSS 42.00%May 5, 2025
- High8.1Mojolicious versions from 0.999922 for Perl uses a hard coded string, or the application's class name, as an HMAC session cookie secret by default.Check this weekEPSS 55.00%May 3, 2025
- Medium5.3Mojolicious versions from 7.28 through 9.45 for Perl will generate weak HMAC session cookie secrets via "mojo generate app" by default.Check this weekEPSS 57.00%May 3, 2025
- High7.3The The Motors - Car Dealer, Rental & Listing WordPress theme theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.6.65.Check this weekEPSS 52.00%May 3, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: initialize struct pn533_out_arg properly struct pn533_out_arg used as a temporary context for out_urCheck this weekEPSS 20.00%May 2, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd/core: Always clear status for idx The variable 'status' (which contains the unhandled overflow bitsCheck this weekEPSS 20.00%May 2, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: mptcp: use the workqueue to destroy unaccepted sockets Christoph reported a UaF at token lookup time after havinCheck this weekEPSS 20.00%May 2, 2025
- Critical9.8The OTP-less one tap Sign in plugin for WordPress is vulnerable to privilege escalation via account takeover in versions 2.0.14 to 2.0.59.Check if you run itEPSS 0.55%May 2, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: cxl/pmem: Fix cxl_pmem_region and cxl_memdev leak When a cxl_nvdimm object goes through a ->remove() event (deviCheck this weekEPSS 17.00%May 1, 2025