Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1A vulnerability was found in DedeBIZ up to 6.3.2.Check if you run itEPSS 0.33%Nov 7, 2025
- Critical9.3monstaftp monsta_ftp Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 72.68%Nov 7, 2025
- Medium5.1A weakness has been identified in code-projects Responsive Hotel Site 1.0.Check if you run itEPSS 0.41%Nov 7, 2025
- Medium6.3A vulnerability was identified in newbee-mall-plus up to 2.4.1.Check if you run itEPSS 0.49%Nov 7, 2025
- Medium5.3Use of password hash with insufficient computational effort issue exists in BUFFALO Wi-Fi router 'WSR-1800AX4 series'.Check if you run itEPSS 0.13%Nov 7, 2025
- Medium4.0The WP Airbnb Review Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 4.2 due to insufficient URL vCheck if you run itEPSS 0.23%Nov 7, 2025
- High7.2ClipBucket v5 is an open source video sharing platform.Check if you run itEPSS 0.27%Nov 7, 2025
- High7.2ClipBucket v5 is an open source video sharing platform.Check if you run itEPSS 0.31%Nov 7, 2025
- Medium6.9containerd is an open-source container runtime.Check if you run itEPSS 0.17%Nov 7, 2025
- Medium5.3kgateway is a Cloud-Native API and AI Gateway.Check if you run itEPSS 0.16%Nov 7, 2025
- Low3.7A vulnerability in Vercel’s AI SDK has been fixed in versions 5.0.52, 5.1.0-beta.9, and 6.0.0-beta.Check if you run itEPSS 0.28%Nov 7, 2025
- Medium6.9A vulnerability in Nuxt DevTools has been fixed in version **2.6.4***.Check if you run itEPSS 0.25%Nov 7, 2025
- High7.6A Broken Object Level Authorization (BOLA) vulnerability was discovered in the tRPC project mutation APIs (update, delete, add/remove tag) of the Onlook web application 0.2.32.Check if you run itEPSS 0.31%Nov 7, 2025
- Medium6.1Cross-Site Scripting (XSS) vulnerability in SourceCodester "MatchMaster" 1.0 allows remote attackers to inject arbitrary web script or HTML via crafted input in the custom test creCheck if you run itEPSS 0.36%Nov 7, 2025
- Critical9.6In pig-mesh In Pig version 3.8.2 and below, within the Token Management function under the System Management module, the token query interface (/api/admin/sys-token/page) has an imCheck if you run itEPSS 0.38%Nov 7, 2025
- Medium6.5An issue was discovered in rymcu forest thru commit f782e85 (2025-09-04) in function doBefore in file src/main/java/com/rymcu/forest/core/service/security/AuthorshipAspect.java, alCheck if you run itEPSS 0.27%Nov 7, 2025
- Medium6.1The chat feature in the application Sourcecodester FAQ Bot with AI Assistant v1.0 is vulnerable to Cross-Site Scripting (XSS) due to improper handling of user-supplied input.Check if you run itEPSS 0.24%Nov 7, 2025
- Medium6.1Sourcecodester AI-Powered To-Do List App v1.0 is vulnerable to Cross-Site Scripting (XSS) in the "Task Title" and "Description (Optional)" fields when creating a Task, allowing anCheck if you run itEPSS 0.24%Nov 7, 2025
- High7.5A Local File Inclusion (LFI) vulnerability has been identified in tQuadra CMS 4.2.1117.Check if you run itEPSS 0.49%Nov 7, 2025
- High7.5AstrBot Project v3.5.22 contains a directory traversal vulnerability.Check if you run itEPSS 0.83%Nov 7, 2025
- Critical9.2Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.62%Nov 7, 2025
- High7.1The Ubia camera ecosystem fails to adequately secure API credentials, potentially enabling an attacker to connect to backend services.Check if you run itEPSS 0.27%Nov 6, 2025
- Medium6.3Inappropriate implementation in Storage in Google Chrome on Mac prior to 141.0.7390.54 allowed a remote attacker to perform domain spoofing via a crafted video file.Check if you run itEPSS 0.24%Nov 6, 2025
- Medium6.3Inappropriate implementation in Omnibox in Google Chrome on Android prior to 141.0.7390.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to perfoCheck if you run itEPSS 0.23%Nov 6, 2025
- Medium6.3Inappropriate implementation in Media in Google Chrome on Windows prior to 141.0.7390.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to performCheck if you run itEPSS 0.21%Nov 6, 2025
Sort