Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2Improper Control of Generation of Code ('Code Injection') vulnerability in VideoWhisper.Com Broadcast Live Video allows Code Injection.Check if you run itEPSS 0.41%May 25, 2026
- Low2.1A vulnerability was identified in Totolink CA750-PoE 6.2c.510.Check if you run itEPSS 1.16%May 25, 2026
- Low1.9A weakness has been identified in GNU LibreDWG up to 0.14.Check if you run itEPSS 0.18%May 25, 2026
- Medium5.3Missing Authorization vulnerability in WP Chill RSVP and Event Management allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.23%May 25, 2026
- Medium5.3Missing Authorization vulnerability in Cornel Raiu WP Search Analytics allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.23%May 25, 2026
- Medium4.9Missing Authorization vulnerability in Kings Plugins B2BKing allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.25%May 25, 2026
- Medium5.3Missing Authorization vulnerability in Lucian Apostol Auto Affiliate Links allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.23%May 25, 2026
- Medium5.4Missing Authorization vulnerability in Themeansar Newses allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.26%May 25, 2026
- Medium4.3Missing Authorization vulnerability in WPPOOL FlexTable allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.20%May 25, 2026
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Convers Lab WPSubscription allows Cross Site Request Forgery.Check if you run itEPSS 0.12%May 25, 2026
- Medium4.3Missing Authorization vulnerability in Patterns in the cloud Autoship Cloud for WooCommerce Subscription Products allows Exploiting Incorrectly Configured Access Contr…Check if you run itEPSS 0.20%May 25, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins Team Showcase allows Stored XSS.Check if you run itEPSS 0.17%May 25, 2026
- Low1.9A security flaw has been discovered in GNU LibreDWG up to 0.14.Check if you run itEPSS 0.11%May 25, 2026
- Low1.9A vulnerability was identified in GNU LibreDWG up to 0.14.Check if you run itEPSS 0.15%May 25, 2026
- Low1.9A vulnerability was determined in GNU LibreDWG up to 0.14.Check if you run itEPSS 0.15%May 25, 2026
- Low1.9A vulnerability was found in GNU LibreDWG up to 0.14.Check if you run itEPSS 0.12%May 25, 2026
- Low3.7PuTTY 0.71 before 0.84 has an assertion failure in ECDSA signature verification.Check if you run itEPSS 0.27%May 25, 2026
- Low3.1PuTTY 0.77 before 0.84 uses a copy of the PuTTY icon as a trust indication for TELNET data but the trust status is not cleared between proxy authentication and the main session.Check if you run itEPSS 0.22%May 25, 2026
- Medium5.9PuTTY 0.72 before 0.84 has a double free in RSA KEX.Check if you run itEPSS 0.32%May 25, 2026
- None0.0Apache Shiro’s Jakarta EE module used the HTTP Referer header in certain cases to issue redirect after a user login.Check if you run itEPSS 0.35%May 25, 2026
- Medium5.1With valid login credentials, URL Redirection to Untrusted Site ('Open Redirect'), Server-Side Request Forgery (SSRF) vulnerability in Apache Shiro.Check if you run itEPSS 0.37%May 25, 2026
- Medium5.9Default configurations of Apache Shiro send sensitive cookies in HTTPS session without 'Secure' attribute.Check if you run itEPSS 0.27%May 25, 2026
- Medium5.9Default configurations of Apache Shiro have a session fixation vulnerability.Check if you run itEPSS 0.41%May 25, 2026
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in WpDevArt Organization chart allows Cross Site Request Forgery.Check if you run itEPSS 0.12%May 25, 2026
- Medium6.5Cross-Site Request Forgery (CSRF) vulnerability in Recorp Export WP Page to Static HTML/CSS allows Cross Site Request Forgery.Check if you run itEPSS 0.14%May 25, 2026
Sort