Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8NVIDIA NeMo Framework for all platforms contains a vulnerability in a script, where malicious input created by an attacker may cause improper control of code generation.Check if you run itEPSS 0.26%Nov 11, 2025
- Low0.5Login credentials are inadvertently recorded in logs if a Syslog Server is configured in NETGEAR WAX610 and WAX610Y (AX1800 Dual Band PoE Multi-Gig Insight Managed WiFi 6 Access PoCheck if you run itEPSS 0.29%Nov 11, 2025
- High7.8NVIDIA Megatron-LM for all platforms contains a vulnerability in a script, where malicious data created by an attacker may cause a code injection issue.Check if you run itEPSS 0.46%Nov 11, 2025
- Low2.7In JetBrains YouTrack before 2025.3.104432 a race condition allowed bypass of helpdesk Agent limitCheck if you run itEPSS 0.23%Nov 11, 2025
- High8.6A security issue exists within DataMosaix™ Private Cloud allowing for Persistent XSS.Check if you run itEPSS 0.37%Nov 11, 2025
- High7.6A security issue exists within DataMosaix™ Private Cloud, allowing attackers to bypass MFA during setup and obtain a valid login-token cookie without knowing the users password.Check if you run itEPSS 0.16%Nov 11, 2025
- Medium5.1HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a PCheck if you run itEPSS 0.18%Nov 11, 2025
- Medium5.1HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a PCheck if you run itEPSS 0.17%Nov 11, 2025
- Medium5.1HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a PCheck if you run itEPSS 0.17%Nov 11, 2025
- Medium5.1HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a PCheck if you run itEPSS 0.17%Nov 11, 2025
- Medium5.1HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a PCheck if you run itEPSS 0.17%Nov 11, 2025
- Medium5.1HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a PCheck if you run itEPSS 0.17%Nov 11, 2025
- Medium5.3The Hydra Booking — Appointment Scheduling & Booking Calendar plugin for WordPress is vulnerable to missing payment verification to unauthenticated payment bypass in all versions uCheck if you run itEPSS 0.35%Nov 11, 2025
- Medium4.3The Classified Listing – AI-Powered Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability cCheck if you run itEPSS 0.24%Nov 11, 2025
- Medium5.3The Hydra Booking — Appointment Scheduling & Booking Calendar plugin for WordPress is vulnerable to unauthorized booking cancellation in all versions up to, and including, 1.1.27.Check if you run itEPSS 0.31%Nov 11, 2025
- High7.3Zohocorp ManageEngine Exchange Reporter Plus versions 5723 and below are vulnerable to the Stored XSS Vulnerability in the Mails Deleted or Moved report.Check if you run itEPSS 0.52%Nov 11, 2025
- Medium6.4The VAPIX Edge storage API that allowed a privilege escalation, enabling a VAPIX administrator-privileged user to gain Linux Root privileges.Check if you run itEPSS 0.12%Nov 11, 2025
- Medium6.6A malicious ACAP application can gain access to admin-level service account credentials used by legitimate ACAP applications, leading to potential privilege escalation of the malicCheck if you run itEPSS 0.31%Nov 11, 2025
- Medium6.7ACAP applications can gain elevated privileges due to improper input validation, potentially leading to privilege escalation.Check if you run itEPSS 0.15%Nov 11, 2025
- Medium5.3The Make Email Customizer for WooCommerce WordPress plugin through 1.0.6 lacks proper authorization checks and option validation in its AJAX actions, allowing any authenticated useCheck if you run itEPSS 0.29%Nov 11, 2025
- Medium4.4The Featured Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image metadata in all versions up to, and including, 2.1 due to insufficient input sanitizaCheck if you run itEPSS 0.51%Nov 11, 2025
- Medium5.3The Crypto plugin for WordPress is vulnerable to Information exposure in all versions up to, and including, 2.22.Check if you run itEPSS 0.38%Nov 11, 2025
- Critical9.8The EasyCommerce – AI-Powered, Fast & Beautiful WordPress Ecommerce Plugin plugin for WordPress is vulnerable to Privilege Escalation in versions 0.9.0-beta2 to 1.8.2.Check if you run itEPSS 0.43%Nov 11, 2025
- Medium4.9The Double the Donation – A workplace giving tool to help your fundraising efforts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versiCheck if you run itEPSS 0.22%Nov 11, 2025
- Medium5.3The Document Pro Elementor – Documentation & Knowledge Base plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.0.9.Check if you run itEPSS 0.40%Nov 11, 2025
Sort