Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.3Insider Threat Management (ITM) Server versions prior to 7.17.2 contain an authentication bypass vulnerability that allows unauthenticated users on an adjacent network to perform aCheck if you run itEPSS 0.63%Nov 3, 2025
- High7.1IdentityIQ 8.5, IdentityIQ 8.4 and all 8.4 patch levels prior to 8.4p4, IdentityIQ 8.3 and all 8.3 patch levels including 8.3p5, and all prior versions allows some IdentityIQ web sCheck if you run itEPSS 0.22%Nov 3, 2025
- Critical9.8The Doccure Core plugin for WordPress is vulnerable to privilege escalation in versions up to, and excluding, 1.5.4.Check if you run itEPSS 0.40%Nov 3, 2025
- Medium5.3Missing Authorization vulnerability in d3wp WP Snow Effect wp-snow-effect allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP Snow Effect: from n/Check if you run itEPSS 0.23%Nov 3, 2025
- Medium5.3A security flaw has been discovered in jeecgboot jeewx-boot up to 641ab52c3e1845fec39996d7794c33fb40dad1dd.Check if you run itEPSS 0.45%Nov 3, 2025
- Critical9.8React Native Community CLI OS Command Injection VulnerabilityPatch nowKEVEPSS 93.98%Nov 3, 2025
- Low2.3A vulnerability was identified in fushengqian fuint up to 41e26be8a2c609413a0feaa69bdad33a71ae8032.Check if you run itEPSS 0.33%Nov 3, 2025
- High7.1EasyFlow .NET and EasyFlow AiNet developed by Digiwin has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database cCheck if you run itEPSS 0.35%Nov 3, 2025
- Medium5.1A weakness has been identified in SourceCodester Best House Rental Management System 1.0.Check if you run itEPSS 0.41%Nov 3, 2025
- High8.7A vulnerability was identified in Tenda AC21 16.03.08.16.Check if you run itEPSS 0.74%Nov 3, 2025
- Medium6.9A vulnerability was identified in itsourcecode Online Loan Management System 1.0.Check if you run itEPSS 0.41%Nov 3, 2025
- Medium4.6Simple User Management System with PHP-MySQL v1.0 is vulnerable to Cross-Site Scripting (XSS) via the Profile Section.Check if you run itEPSS 0.21%Nov 3, 2025
- Medium6.5FairSketch Rise Ultimate Project Manager & CRM 3.9.4 is vulnerable to Insecure Permissions.Check if you run itEPSS 0.38%Nov 3, 2025
- High7.5Directory traversal vulnerability in NextChat thru 2.16.0 due to the WebDAV proxy failing to canonicalize or reject dot path segments in its catch-all route, allowing attackers toCheck if you run itEPSS 0.92%Nov 3, 2025
- Medium5.4Phpgurukul Maid Hiring Management System 1.0 is vulnerable to Cross Site Scripting (XSS) in /maid-hiring.php va the name field.Check if you run itEPSS 0.25%Nov 3, 2025
- High8.7A weakness has been identified in Tenda AC23 16.03.07.52.Check if you run itEPSS 1.10%Nov 2, 2025
- Medium5.1A vulnerability was identified in code-projects Simple Online Hotel Reservation System 2.0.Check if you run itEPSS 0.43%Nov 2, 2025
- High8.8IBM i 7.6, 7.5, 7.4, 7.3, and 7.2 is vulnerable to privilege escalation caused by an invalid IBM i SQL services authorization check.Check if you run itEPSS 0.31%Nov 1, 2025
- High8.8The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and excluding, 6.1.Check if you run itEPSS 0.30%Nov 1, 2025
- High7.2The Community Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via event details parameter in all versions up to, and including, 1.5.2 due to insufficient iCheck if you run itEPSS 0.29%Nov 1, 2025
- High8.8The WPCOM Member plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.7.14 via the action parameter in one of its shortcodes.Check if you run itEPSS 0.56%Nov 1, 2025
- Critical9.8WPExperts post_smtp Missing AuthorizationPatch nowKEVEPSS 61.48%Nov 1, 2025
- Medium4.6The Document Library and the Adaptive Media modules in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.10, 2023.Q3Check if you run itEPSS 0.13%Oct 31, 2025
- Medium6.3Protection mechanism failure in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.41%Oct 31, 2025
- High7.6When SmartStart Inclusion fails during the onboarding of a Z-Wave PIR sensor, the sensor will join the network as a non-secure device.Check if you run itEPSS 0.32%Oct 31, 2025
Sort