Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.2In pda, there is a possible escalation of privilege due to use after free.Check if you run itEPSS 0.08%Nov 4, 2025
- Medium4.2In clkdbg, there is a possible escalation of privilege due to use after free.Check if you run itEPSS 0.08%Nov 4, 2025
- Medium6.7In preloader, there is a possible escalation of privilege due to an insecure default value.Check if you run itEPSS 0.08%Nov 4, 2025
- High7.5The Elegance Menu plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.9 via the 'elegance-menu' attribute of the shortcode.Check if you run itEPSS 0.59%Nov 4, 2025
- Medium4.3The Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabilityCheck if you run itEPSS 0.19%Nov 4, 2025
- Medium6.1The Centangle-Team plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.0.Check if you run itEPSS 0.16%Nov 4, 2025
- High7.5The Crypto Payment Gateway with Payeer for WooCommerce plugin for WordPress is vulnerable to payment bypass in all versions up to, and including, 1.0.3.Check if you run itEPSS 0.30%Nov 4, 2025
- Medium6.5The All in One Time Clock Lite plugin for WordPress is vulnerable to unauthorized access due to a missing authorization check in all versions up to, and including, 2.0.3.Check if you run itEPSS 0.27%Nov 4, 2025
- Medium5.8The service employed by Everything, running as SYSTEM, communicates with the lower privileged Everything GUI via a named pipe.Check if you run itEPSS 0.10%Nov 4, 2025
- High7.5A privacy issue was addressed by removing sensitive data.Check if you run itEPSS 0.47%Nov 4, 2025
- High7.8A permissions issue was addressed with additional restrictions.Check if you run itEPSS 0.17%Nov 4, 2025
- Medium4.6An authentication issue was addressed with improved state management.Check if you run itEPSS 0.24%Nov 4, 2025
- Low2.0A logging issue was addressed with improved data redaction.Check if you run itEPSS 0.25%Nov 4, 2025
- High7.5This issue was addressed through improved state management.Check if you run itEPSS 0.46%Nov 4, 2025
- High7.8A validation issue was addressed with improved input sanitization.Check if you run itEPSS 0.20%Nov 4, 2025
- Medium6.5By failing to authenticate three times to an unconfigured Abilis CPX device via SSH, an attacker can login to a restricted shell on the fourth attempt, and from there, relay connecCheck if you run itEPSS 0.33%Nov 4, 2025
- Medium6.5Mantis Bug Tracker (MantisBT) is an open source issue tracker.Check if you run itEPSS 0.41%Nov 4, 2025
- Medium6.1A reflected cross-site scripted (XSS) vulnerability in the /jsp/gsfr_feditorHTML.jsp endpoint of Zucchetti ZMaintenance Infinity and Infinity Zucchetti v4.1 and earlier allows attaCheck if you run itEPSS 0.20%Nov 4, 2025
- Medium5.3codeshare v1.0.0 was discovered to contain an information leakage vulnerability.Check if you run itEPSS 0.33%Nov 4, 2025
- High7.0Deck Mate 2 is distributed with static, hard-coded credentials for the root shell and web user interface, while multiple management services (SSH, HTTP, Telnet, SMB, X11) are enablCheck if you run itEPSS 0.20%Nov 3, 2025
- Critical9.4Nagios XI versions prior to 2024R1.1.3 contain a privilege escalation vulnerability in which an authenticated administrator could leverage the Migrate Server feature to obtain rootCheck if you run itEPSS 1.21%Nov 3, 2025
- Medium6.0Nagios XI versions prior to 2024R1.1.3, under certain circumstances, disclose sensitive user account information (including API keys and hashed passwords) to authenticated users whCheck if you run itEPSS 1.04%Nov 3, 2025
- Medium6.8A potential vulnerability was reported in some Lenovo Tablets that could allow a local authenticated user or application to gain access to sensitive device specific information.Check if you run itEPSS 0.12%Nov 3, 2025
- Medium5.9The KMIP response parser built into mongo binaries is overly tolerant of certain malformed packets, and may parse them into invalid objects.Check if you run itEPSS 0.39%Nov 3, 2025
- Medium6.9lighttpd1.4.80 incorrectly merged trailer fields into headers after http request parsing.Check if you run itEPSS 0.37%Nov 3, 2025
Sort