Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3The Torod – The smart shipping and delivery portal for e-shops and retailers plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including,Check if you run itEPSS 0.15%Dec 5, 2025
- High8.8The Auto Thumbnailer plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the uploadThumb() function in all versions up to, and incluCheck if you run itEPSS 0.52%Dec 5, 2025
- High8.8The Bread & Butter: Gate content + Capture leads + Collect first-party data + Nurture with Ai agents plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versionCheck if you run itEPSS 0.33%Dec 5, 2025
- High8.8The Featured Image via URL plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation function in all versions up to, and including, 0.1.Check if you run itEPSS 0.55%Dec 5, 2025
- Medium6.1The dream gallery plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.Check if you run itEPSS 0.14%Dec 5, 2025
- Critical9.8The CRM Memberships plugin for WordPress is vulnerable to privilege escalation via password reset in all versions up to, and including, 2.6.Check if you run itEPSS 0.55%Dec 5, 2025
- Medium4.3The Norby AI plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.3.Check if you run itEPSS 0.15%Dec 5, 2025
- Medium5.1A flaw exists in the verification of application installation sources within ColorOS.Check if you run itEPSS 0.13%Dec 5, 2025
- Medium5.3A vulnerability has been found in youlaitech youlai-mall 1.0.0/2.0.0.Check if you run itEPSS 0.26%Dec 5, 2025
- Critical9.8Array Networks ArrayOS AG OS Command Injection VulnerabilityPatch nowKEVEPSS 3.42%Dec 5, 2025
- High8.1Warehouse Management System 1.2 contains an authenticated arbitrary file deletion vulnerability.Check if you run itEPSS 0.79%Dec 5, 2025
- High7.5The warehouse management system version 1.2 contains an arbitrary file read vulnerability.Check if you run itEPSS 0.70%Dec 5, 2025
- Medium4.3In KDE Connect before 1.33.0 on Android, a packet can be crafted that causes two paired devices to unpair.Check if you run itEPSS 0.18%Dec 5, 2025
- High7.5Sigstore Timestamp Authority is a service for issuing RFC 3161 timestamps.Check if you run itEPSS 0.44%Dec 4, 2025
- High7.1Monkeytype is a minimalistic and customizable typing test.Check if you run itEPSS 0.24%Dec 4, 2025
- Medium5.3A flaw has been found in youlaitech youlai-mall 1.0.0/2.0.0.Check if you run itEPSS 0.47%Dec 4, 2025
- High8.0Taiko Alethia is an Ethereum-equivalent, permissionless, based rollup designed to scale Ethereum without compromising its fundamental properties.Check if you run itEPSS 0.31%Dec 4, 2025
- High7.5Fulcio is a free-to-use certificate authority for issuing code signing certificates for an OpenID Connect (OIDC) identity.Check if you run itEPSS 0.21%Dec 4, 2025
- Medium6.7An Expected Behavior Violation [CWE-440] vulnerability in WatchGuard Fireware OS may allow an attacker to bypass the Fireware OS boot time system integrity check and prevent the FiCheck if you run itEPSS 0.13%Dec 4, 2025
- High7.4The web interface of the Silicon Labs Simplicity Device Manager is exposed publicly and can be used to extract the NTLMv2 hash which an attacker could use to crack the user's domaiCheck if you run itEPSS 0.17%Dec 4, 2025
- High8.3The SolisCloud API suffers from a Broken Access Control vulnerability, specifically an Insecure Direct Object Reference (IDOR), where any authenticated user can access detailed datCheck if you run itEPSS 0.26%Dec 4, 2025
- High7.4DCIM dcTrack allows an attacker to misuse certain remote access features.Check if you run itEPSS 0.34%Dec 4, 2025
- Low1.8Anthropic Sandbox Runtime is a lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container.Check if you run itEPSS 0.16%Dec 4, 2025
- High8.7Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Check if you run itEPSS 0.24%Dec 4, 2025
- High8.5VeeVPN 1.6.1 contains an unquoted service path vulnerability in the VeePNService that allows remote attackers to execute code during startup or reboot with escalated privileges.Check if you run itEPSS 0.46%Dec 4, 2025
Sort