Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1The HandL UTM Grabber / Tracker WordPress plugin before 2.8.1 does not sanitize and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site ScriCheck if you run itEPSS 0.17%Dec 10, 2025
- High7.1The HandL UTM Grabber / Tracker WordPress plugin before 2.8.1 does not sanitize and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site ScriCheck if you run itEPSS 0.17%Dec 10, 2025
- High7.5The Hippoo Mobile App for WooCommerce plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.7.1 via the template_redirect() function.Check if you run itEPSS 2.21%Dec 10, 2025
- Medium4.9The Simple Download Counter plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 2.2.2.Check if you run itEPSS 0.52%Dec 10, 2025
- Critical9.8The Elated Membership plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.2.Check if you run itEPSS 0.48%Dec 10, 2025
- High8.1Filament is a collection of full-stack components for accelerated Laravel development.Check if you run itEPSS 0.34%Dec 10, 2025
- Critical9.8PipesHub is a fully extensible workplace AI platform for enterprise search and workflow automation.Check if you run itEPSS 1.81%Dec 10, 2025
- High8.7Gogs Path Traversal VulnerabilityPatch nowKEVEPSS 85.20%Dec 10, 2025
- Medium4.6The mobile application insecurely handles information stored within memory.Check if you run itEPSS 0.14%Dec 10, 2025
- High7.5The application uses an insecure hashing algorithm (MD5) to hash passwords.Check if you run itEPSS 0.21%Dec 10, 2025
- Medium6.8The ESP32 system on a chip (SoC) that powers the Meatmeet basestation device was found to lack Secure Boot.Check if you run itEPSS 0.32%Dec 10, 2025
- Critical9.1The mobile application is configured to allow clear text traffic to all domains and communicates with an API server over HTTP.Check if you run itEPSS 0.26%Dec 10, 2025
- Critical9.8The mobile application was found to contain stored credentials for the network it was developed on.Check if you run itEPSS 0.29%Dec 10, 2025
- Medium4.6The firmware on the basestation of the Meatmeet is not encrypted.Check if you run itEPSS 0.13%Dec 10, 2025
- High8.8An unauthenticated attacker within proximity of the Meatmeet device can perform an unauthorized Over The Air (OTA) firmware upgrade using Bluetooth Low Energy (BLE), resulting in tCheck if you run itEPSS 0.56%Dec 10, 2025
- Critical9.8The Meatmeet Pro was found to be shipped with hardcoded Wi-Fi credentials in the firmware, for the test network it was developed on.Check if you run itEPSS 0.43%Dec 10, 2025
- Medium6.8The ESP32 system on a chip (SoC) that powers the Meatmeet Pro was found to have JTAG enabled.Check if you run itEPSS 0.21%Dec 10, 2025
- High7.5As UART download mode is still enabled on the ESP32 chip on which the firmware runs, an adversary can dump the flash from the device and retrieve sensitive information such as detaCheck if you run itEPSS 0.37%Dec 10, 2025
- Critical9.8An issue was discovered in Meatmeet Android Mobile Application 1.1.2.0.Check if you run itEPSS 0.47%Dec 10, 2025
- High7.5A Server-Side Request Forgery (SSRF) vulnerability was discovered in the webpage-to-markdown conversion feature of markdownify-mcp v0.0.2 and before.Check if you run itEPSS 0.53%Dec 10, 2025
- High8.1Multiple vulnerabilities in Aqara Hub firmware update process in the Camera Hub G3 4.1.9_0027, Hub M2 4.3.6_0027, and Hub M3 4.3.6_0025 devices, allow attackers to install maliciouCheck if you run itEPSS 0.23%Dec 10, 2025
- Critical9.8Aqara Hub devices including Camera Hub G3 4.1.9_0027, Hub M2 4.3.6_0027, and Hub M3 4.3.6_0025 contain an undocumented remote access mechanism enabling unrestricted remote commandCheck if you run itEPSS 1.80%Dec 10, 2025
- High7.3Command injection vulnerability in Aqara Hub devices including Camera Hub G3 4.1.9_0027, Hub M2 4.3.6_0027, and Hub M3 4.3.6_0025 allows attackers to execute arbitrary commands witCheck if you run itEPSS 1.47%Dec 10, 2025
- High7.4Aqara Hub devices including Hub M2 4.3.6_0027, Hub M3 4.3.6_0025, Camera Hub G3 4.1.9_0027 fail to validate server certificates in TLS connections for discovery services and CoAP gCheck if you run itEPSS 0.18%Dec 10, 2025
- High7.4Aqara Hub devices including Camera Hub G3 4.1.9_0027, Hub M2 4.3.6_0027, and Hub M3 4.3.6_0025 fail to validate server certificates during HTTPS firmware downloads, allowing man-inCheck if you run itEPSS 0.18%Dec 10, 2025
Sort