Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- None0.0In the Linux kernel, the following vulnerability has been resolved: io_uring/rw: ensure allocated iovec gets cleared for early failure A previous commit reused the recyling infrastCheck if you run itEPSS 0.17%Dec 6, 2025
- High8.7A vulnerability was identified in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001.Check if you run itEPSS 0.87%Dec 6, 2025
- High8.8The Starter Templates plugin for WordPress is vulnerable to arbitrary file upload in all versions up to, and including, 4.4.41.Check this weekEPSS 13.51%Dec 6, 2025
- Medium5.3The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions upCheck if you run itEPSS 0.28%Dec 6, 2025
- Medium6.4The Yet Another WebClap for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'text' parameter of the webclap_button shortcode in all versions upCheck if you run itEPSS 0.24%Dec 6, 2025
- Medium4.3The Search, Filters & Merchandising for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'wcis_save_emaiCheck if you run itEPSS 0.23%Dec 6, 2025
- Medium4.3The Listar – Directory Listing & Classifieds WordPress Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the '/wp-Check if you run itEPSS 0.19%Dec 6, 2025
- High7.6A vulnerability in Apigee-X allowed an attacker to gain unauthorized read and write access to Apigee Analytics (AX) data and access logs belonging to other Apigee customer organizaCheck if you run itEPSS 0.27%Dec 6, 2025
- Medium6.5The Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'existing_terms_orderby' parameterCheck if you run itEPSS 0.29%Dec 6, 2025
- Medium5.4The weDocs plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 2.1.14.Check if you run itEPSS 0.22%Dec 6, 2025
- High8.7A weakness has been identified in ZSPACE Q2C NAS up to 1.1.0210050.Check this weekEPSS 10.46%Dec 5, 2025
- High8.7A vulnerability was identified in ZSPACE Q2C NAS up to 1.1.0210050.Check this weekEPSS 12.09%Dec 5, 2025
- High7.0Dell CloudBoost Virtual Appliance, versions 19.13.0.0 and prior, contains an Improper Restriction of Excessive Authentication Attempts vulnerability.Check if you run itEPSS 0.23%Dec 5, 2025
- Medium5.3cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.Check if you run itEPSS 0.27%Dec 5, 2025
- High8.9TUUI is a desktop MCP client designed as a tool unitary utility integration.Check if you run itEPSS 0.52%Dec 5, 2025
- Medium5.4Nextcloud Mail is the mail app for Nextcloud, a self-hosted productivity platform.Check if you run itEPSS 0.25%Dec 5, 2025
- Medium5.4Nextcloud Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud.Check if you run itEPSS 0.28%Dec 5, 2025
- Medium5.5Nextcloud Deck is a kanban style organization tool aimed at personal planning and project organization for teams integrated with Nextcloud.Check if you run itEPSS 0.15%Dec 5, 2025
- High8.6Flexsense DiskBoss 7.7.14 contains a local buffer overflow vulnerability in the 'Input Directory' component that allows unauthenticated attackers to execute arbitrary code on the sCheck if you run itEPSS 0.37%Dec 5, 2025
- High8.6Flexsense DiskBoss 7.7.14 contains a local buffer overflow vulnerability in the 'Reports and Data Directory' field that allows an attacker to execute arbitrary code on the system.Check if you run itEPSS 0.24%Dec 5, 2025
- Critical10.0Advantech WISE-DeviceOn Server versions prior to 5.4 contain a hard-coded cryptographic key vulnerability.Check if you run itEPSS 0.69%Dec 5, 2025
- Medium5.1Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /rmm/v1/rule-engines endpoint.Check if you run itEPSS 0.20%Dec 5, 2025
- Medium5.1Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /rmm/v1/plugin-config/dashboards/menus endpoint.Check if you run itEPSS 0.20%Dec 5, 2025
- High8.7ReQuest Serious Play Media Player 3.0 contains an unauthenticated file disclosure vulnerability when input passed through the 'file' parameter in and script is not properly verifieCheck if you run itEPSS 0.35%Dec 5, 2025
- Medium5.1Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /rmm/v1/plugin-config/addins/menus endpoint.Check if you run itEPSS 0.21%Dec 5, 2025
Sort