Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3The Cryptocurrency (Token), Launchpad (Presale), ICO & IDO, Airdrop by TokenICO plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabilityCheck if you run itEPSS 0.24%Nov 21, 2025
- Medium5.3The Cryptocurrency (Token), Launchpad (Presale), ICO & IDO, Airdrop by TokenICO plugin for WordPress is vulnerable to unauthenticated and unauthorized modification of data due to mCheck if you run itEPSS 0.34%Nov 21, 2025
- Medium6.4The UiPress lite | Effortless custom dashboards, admin themes and pages plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check onCheck if you run itEPSS 0.23%Nov 21, 2025
- Medium6.5The UiPress lite plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.5.08.Check if you run itEPSS 0.27%Nov 21, 2025
- Medium6.4The Affiliate AI Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'asin' shortcode attribute in the affiai_img shortcode in all versions up to, and inCheck if you run itEPSS 0.24%Nov 21, 2025
- High7.1The Flo Forms – Easy Drag & Drop Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG file uploads in all versions up to, and including, 1.0.43.Check if you run itEPSS 0.34%Nov 21, 2025
- High8.1The WP AUDIO GALLERY plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in all versions up to, and including, 2.0.Check if you run itEPSS 0.67%Nov 21, 2025
- Medium6.1The Tainacan plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'search' parameter in all versions up to, and including, 1.0.0 due to insufficient input sCheck if you run itEPSS 0.27%Nov 21, 2025
- Medium6.9LogStare Collector improperly handles the password hash data.Check this weekEPSS 28.00%Nov 21, 2025
- Medium5.3LogStare Collector contains an incorrect authorization vulnerability in UserRegistration.Check this weekEPSS 25.00%Nov 21, 2025
- Medium4.8LogStare Collector contains a stored cross-site scripting vulnerability in UserManagement.Check this weekEPSS 19.00%Nov 21, 2025
- Medium5.8OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.Check if you run itEPSS 0.31%Nov 21, 2025
- Medium6.5vLLM is an inference and serving engine for large language models (LLMs).Check if you run itEPSS 0.54%Nov 21, 2025
- Medium4.8A vulnerability was identified in Campcodes Complete Online Beauty Parlor Management System 1.0.Check if you run itEPSS 0.27%Nov 20, 2025
- High8.8Improper authorization in Dynamics OmniChannel SDK Storage Containers allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.52%Nov 20, 2025
- High7.5A vulnerability exists in the Opto22 Groov Manage REST API on GRV-EPIC and groov RIO Products that allows remote code execution with root privileges.Check if you run itEPSS 7.30%Nov 20, 2025
- Medium5.1IBM Concert 1.0.0 through 2.0.0 could allow a local user with specific permission to obtain sensitive information from files due to uncontrolled recursive directory copying.Check this weekEPSS 12.00%Nov 20, 2025
- Medium5.3IBM Concert 1.0.0 through 2.0.0 could disclose sensitive server information from HTTP response headers that could aid in further attacks against the system.Check this weekEPSS 27.00%Nov 20, 2025
- High8.8Authorization bypass in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes an logged in attacker to change other users' email address and potentialy take over their accounCheck this weekEPSS 68.00%Nov 20, 2025
- Medium4.3Insecure design policies in the user management system of Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes non-admin users to have access to the contact name and email aCheck this weekEPSS 32.00%Nov 20, 2025
- Medium6.5HackerOne community member Dang Hung Vi (vidang04) has reported a stored XSS vulnerability involving the navigation box at the top of advertiser-related pages, with campaign namesCheck if you run itEPSS 0.22%Nov 20, 2025
- Medium5.4HackerOne community member Dao Hoang Anh (yoyomiski) has reported an improper neutralization of whitespace in the username when adding new users.Check this weekEPSS 25.00%Nov 20, 2025
- Low3.3cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos.Check this weekEPSS 22.00%Nov 20, 2025
- High8.9Dataease is an open source data visualization analysis tool.Check this weekEPSS 62.00%Nov 20, 2025
- Medium6.8ClipBucket v5 is an open source video sharing platform.Check this weekEPSS 39.00%Nov 20, 2025
Sort