Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.7GitLab has remediated an issue in GitLab EE affecting all versions from 18.4 before 18.4.3, and 18.5 before 18.5.1 that under certain conditions could have allowed authenticated usCheck if you run itEPSS 0.32%Oct 27, 2025
- High8.0StarCharge Artemis AC Charger 7-22 kW v1.0.4 was discovered to contain a stack overflow via the cgiMain function at download.cgi.Check if you run itEPSS 0.29%Oct 27, 2025
- Medium4.3The FuseWP – WordPress User Sync to Email List & Marketing Automation (Mailchimp, Constant Contact, ActiveCampaign etc.) plugin for WordPress is vulnerable to Cross-Site Request FoCheck if you run itEPSS 0.14%Oct 25, 2025
- Medium6.5The Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More plugin for WordPress is vulnerable to SQL Injection via the donation_ids parameter in aCheck if you run itEPSS 0.38%Oct 25, 2025
- High8.1The Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to arbitrary file move due to insufficient file path validatioCheck if you run itEPSS 0.91%Oct 25, 2025
- Medium5.3The User Feedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds plugin for WordPress is vulnerable to unauthorized access of data due to a missing capabiliCheck if you run itEPSS 0.26%Oct 25, 2025
- Medium5.3The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check while verifying webhoCheck if you run itEPSS 0.29%Oct 25, 2025
- Medium4.3The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.8.3.Check if you run itEPSS 0.22%Oct 25, 2025
- Medium5.3The eRoom – Webinar & Meeting Plugin for Zoom, Google Meet, Microsoft Teams plugin for WordPress is vulnerable to exposure of sensitive information in all versions up to, and incluCheck if you run itEPSS 0.31%Oct 25, 2025
- High7.0Deck Mate 1 executes firmware directly from an external EEPROM without verifying authenticity or integrity.Check if you run itEPSS 0.13%Oct 24, 2025
- High7.0Deck Mate 2 lacks a verified secure-boot chain and runtime integrity validation for its controller and display modules.Check if you run itEPSS 0.21%Oct 24, 2025
- High7.0Deck Mate 2's firmware update mechanism accepts packages without cryptographic signature verification, encrypts them with a single hard-coded AES key shared across devices, and useCheck if you run itEPSS 0.15%Oct 24, 2025
- High8.6GN4 Publishing System versions prior to 2.6 contain an insecure direct object reference (IDOR) vulnerability via the API.Check if you run itEPSS 0.42%Oct 24, 2025
- Critical9.8D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetWAN_Wizard52.Check if you run itEPSS 0.41%Oct 24, 2025
- High7.5D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formTcpipSetup.Check if you run itEPSS 0.37%Oct 24, 2025
- High7.5D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formEasySetTimezone.Check if you run itEPSS 0.37%Oct 24, 2025
- High7.5D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formAutoDetecWAN_wizard4.Check if you run itEPSS 0.37%Oct 24, 2025
- High7.5D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formLogDnsquery.Check if you run itEPSS 0.46%Oct 24, 2025
- Medium6.2An Insecure Permission vulnerability in pgcodekeeper 10.12.0 allows a local attacker to obtain sensitive information via the plaintext storage of passwords and usernames.Check if you run itEPSS 0.14%Oct 24, 2025
- Critical9.8Dell Storage Center - Dell Storage Manager, version(s) 20.1.21, contain(s) an Improper Authentication vulnerability.Check if you run itEPSS 0.84%Oct 24, 2025
- Medium6.5Dell Storage Center - Dell Storage Manager, version(s) 20.1.20, contain(s) an Improper Restriction of XML External Entity Reference vulnerability.Check if you run itEPSS 0.33%Oct 24, 2025
- Medium4.3The AI Chatbot Free Models – Customer Support, Live Chat, Virtual Assistant plugin for WordPress is vulnerable to CSV Injection in all versions up to, and including, 1.6.5.Check if you run itEPSS 0.29%Oct 24, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: net: sched: cls_u32: Undo tcf_bind_filter if u32_replace_hw_knode When u32_replace_hw_knode fails, we need to unCheck if you run itEPSS 0.15%Oct 24, 2025
- High7.5The Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers plugin for WordPress is vulnerable to Server-Side Request Forgery in all versCheck if you run itEPSS 0.38%Oct 24, 2025
- Medium4.3WSO2 api_control_plane Authentication Bypass by SpoofingPatch nowKEVEPSS 0.85%Oct 24, 2025
Sort