Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8SiRcom SMART Alert (SiSA) allows unauthorized access to backend APIs.Check if you run itEPSS 0.36%Nov 25, 2025
- Medium5.8A Stored Cross-Site Scripting vulnerability was discovered in the Dashboards functionality due to improper validation of an input parameter.Check if you run itEPSS 0.21%Nov 25, 2025
- Medium6.9A path traversal vulnerability has been identified in certain router models.Check if you run itEPSS 0.65%Nov 25, 2025
- High7.5An authentication bypass vulnerability has been identified in the IFTTT integration feature.Check if you run itEPSS 0.62%Nov 25, 2025
- Medium6.0An integer underflow vulnerability has been identified in Aicloud.Check if you run itEPSS 0.41%Nov 25, 2025
- Medium6.5The AI Engine for WordPress: ChatGPT, GPT Content Generator plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.0.1.Check if you run itEPSS 0.53%Nov 25, 2025
- Medium5.3The Admin and Customer Messages After Order for WooCommerce: OrderConvo plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the fCheck if you run itEPSS 0.30%Nov 25, 2025
- Medium4.3The Conditional Maintenance Mode for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.0.Check if you run itEPSS 0.18%Nov 25, 2025
- Medium5.3The Chamber Dashboard Business Directory plugin for WordPress is vulnerable to unauthorized data export due to a missing capability check on the cdash_watch_for_export() function iCheck if you run itEPSS 0.29%Nov 25, 2025
- Medium6.9A stack buffer overflow vulnerability has been identified in certain router models.Check if you run itEPSS 0.45%Nov 25, 2025
- Critical9.2An authentication-bypass vulnerability exists in AiCloud.Check this weekEPSS 12.46%Nov 25, 2025
- Critical9.3Security Point (Windows) of MaLion and MaLionCloud contains a heap-based buffer overflow vulnerability in processing Content-Length.Check if you run itEPSS 0.74%Nov 25, 2025
- Critical9.3Security Point (Windows) of MaLion and MaLionCloud contains a stack-based buffer overflow vulnerability in processing HTTP headers.Check if you run itEPSS 0.74%Nov 25, 2025
- High7.1MongoDB Server may experience an invariant failure during batched delete operations when handling documents.Check if you run itEPSS 0.35%Nov 25, 2025
- High7.1Inconsistent object size validation in time series processing logic may result in later processing of oversized BSON documents leading to an assert failing and process termination.Check if you run itEPSS 0.31%Nov 25, 2025
- Critical9.8The EduKart Pro plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.0.3.Check if you run itEPSS 0.37%Nov 25, 2025
- High8.7Inside Track / Entropy Derby is a research-grade horse-racing betting engine.Check if you run itEPSS 0.13%Nov 25, 2025
- Medium5.1Sentry-Javascript is an official Sentry SDKs for JavaScript.Check if you run itEPSS 0.37%Nov 25, 2025
- Critical9.3lunary-ai/lunary version 1.9.34 is vulnerable to an account takeover due to improper authentication in the Google OAuth integration.Check if you run itEPSS 0.46%Nov 25, 2025
- Medium5.3Primakon Pi Portal 1.0.18 API endpoints responsible for retrieving object-specific or filtered data (e.g., user profiles, project records) fail to implement sufficient server-sideCheck if you run itEPSS 0.25%Nov 25, 2025
- High8.6Primakon Pi Portal 1.0.18 REST /api/v2/user/register endpoint suffers from a Broken Access Control vulnerability.Check if you run itEPSS 0.30%Nov 25, 2025
- High8.8The Primakon Pi Portal 1.0.18 API /api/V2/pp_udfv_admin endpoint, fails to perform necessary server-side validation.Check if you run itEPSS 0.31%Nov 25, 2025
- High8.8Primakon Pi Portal 1.0.18 /api/v2/pp_users endpoint fails to adequately check user permissions before processing a PATCH request to modify the PP_SECURITY_PROFILE_ID.Check if you run itEPSS 0.31%Nov 25, 2025
- Critical9.8Primakon Pi Portal 1.0.18 API endpoints fail to enforce sufficient authorization checks when processing requests.Check if you run itEPSS 0.41%Nov 25, 2025
- High8.8The Primakon Pi Portal 1.0.18 /api/V2/pp_users?email endpoint is used for user data filtering but lacks proper server-side validation against the authenticated session.Check if you run itEPSS 0.31%Nov 25, 2025
Sort