Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3The Originality.ai AI Checker plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'ai_get_table' function in all versions upCheck if you run itEPSS 0.21%Oct 24, 2025
- Medium4.3The Originality.ai AI Checker plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'ai_scan_result_remove' function in all versiCheck if you run itEPSS 0.24%Oct 24, 2025
- High7.2The AIO Forms – Craft Complex Forms Easily plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the import functionality in all versiCheck if you run itEPSS 0.66%Oct 24, 2025
- High7.5The Quickcreator – AI Blog Writer plugin for WordPress is vulnerable to Sensitive Information Exposure in versions 0.0.9 to 0.1.17 through the /wp-content/plugins/quickcreator/dupaCheck if you run itEPSS 0.33%Oct 24, 2025
- Medium4.8Pleasanter contains a stored cross-site scripting vulnerability in Body, Description and Comments, which allows an attacker to execute an arbitrary script in a logged-in user's webCheck if you run itEPSS 0.18%Oct 24, 2025
- Medium5.1Pleasanter contains a stored cross-site scripting vulnerability in Preview for Attachments, which allows an attacker to execute an arbitrary script in a logged-in user's web browseCheck if you run itEPSS 0.20%Oct 24, 2025
- Medium6.4A container privilege escalation flaw was found in certain Container-native Virtualization images.Check if you run itEPSS 0.19%Oct 23, 2025
- Medium5.9Rollbar.js offers error tracking and logging from Javascript to Rollbar.Check if you run itEPSS 0.39%Oct 23, 2025
- High7.1The TLS4B ATG system is vulnerable to improper handling of Unix time values that exceed the 2038 epoch rollover.Check if you run itEPSS 0.45%Oct 23, 2025
- High7.8NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious guest could cause uninitialized pointer access.Check if you run itEPSS 0.18%Oct 23, 2025
- High7.8NVIDIA Project G-Assist contains a vulnerability where an attacker might be able to escalate permissions.Check if you run itEPSS 0.17%Oct 23, 2025
- Medium4.4NVIDIA Display Driver for Windows and Linux contains a vulnerability in a video decoder, where an attacker might cause an out-of-bounds read.Check if you run itEPSS 0.16%Oct 23, 2025
- Medium5.0NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where an attacker might be able to trigger a null pointer deference.Check if you run itEPSS 0.14%Oct 23, 2025
- Medium5.5NVIDIA Display Driver for Linux contains a vulnerability where an attacker might be able to trigger a null pointer dereference.Check if you run itEPSS 0.22%Oct 23, 2025
- Medium5.5NVIDIA Display Driver for Linux contains a vulnerability in the kernel driver, where a user could cause a null pointer dereference by allocating a specific memory resource.Check if you run itEPSS 0.15%Oct 23, 2025
- Medium6.9Tibbo AggreGate Network Manager < 6.40.05 exposes sensitive system information through an unauthenticated endpoint at /cwmp/happyaxis.jsp.Check if you run itEPSS 0.37%Oct 23, 2025
- Medium6.9Tibbo AggreGate Network Manager < 6.40.05 contains an observable response discrepancy in its login functionality.Check if you run itEPSS 0.53%Oct 23, 2025
- High7.2Kottster is a self hosted Node.js admin panel.Check if you run itEPSS 0.61%Oct 23, 2025
- Medium5.4A flaw was found in Keycloak.Check if you run itEPSS 0.30%Oct 23, 2025
- Medium5.4A flaw was found in Keycloak.Check if you run itEPSS 0.24%Oct 23, 2025
- UnknownAn acceptance of extraneous untrusted data with trusted data vulnerability has been identified in Moxa’s Ethernet switches, which allows attackers with administrative privileges toCheck if you run itEPSS 0.18%Oct 23, 2025
- Medium4.8Cross-site Scripting has been identified in Moxa’s Ethernet switches, which allows an authenticated administrative attacker to inject malicious scripts to an affected device’s webCheck if you run itEPSS 0.33%Oct 23, 2025
- Medium6.9Liferay Portal 7.4.0 through 7.4.3.109, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.7, 7.4 GA through update 92, 7.3 GA through update 35, and older unsuCheck if you run itEPSS 0.40%Oct 23, 2025
- Medium5.3The MxChat – AI Chatbot for WordPress plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions up to, and including, 2.4.6.Check if you run itEPSS 0.29%Oct 23, 2025
- Medium5.4A serious authentication flaw allowed attackers with valid credentials to bypass multi-factor authentication under certain conditions, potentially compromising user accounts.Check if you run itEPSS 0.25%Oct 23, 2025
Sort