Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.0Improper authorization in the temporary access workflow of Devolutions Server 2025.2.12.0 and earlier allows an authenticated basic user to self-approve or approve the temporary acCheck if you run itEPSS 0.33%Oct 22, 2025
- Medium5.3Jira Align is vulnerable to an authorization issue.Check if you run itEPSS 0.21%Oct 22, 2025
- High7.5Querying for records within a specially crafted zone containing certain malformed DNSKEY records can lead to CPU exhaustion.Check this weekEPSS 10.74%Oct 22, 2025
- Medium5.3Nautobot Single Source of Truth (SSoT) is an app for Nautobot.Check if you run itEPSS 0.29%Oct 22, 2025
- Medium6.7NVIDIA Bluefield and ConnectX contain a vulnerability in the management interface that could allow a malicious actor with high privilege access to execute arbitrary code.Check if you run itEPSS 0.18%Oct 22, 2025
- High7.9OpenWrt Project is a Linux operating system targeting embedded devices.Check if you run itEPSS 0.26%Oct 22, 2025
- Medium6.3In Eclipse Vert.x versions [4.0.0, 4.5.21] and [5.0.0, 5.0.4], a StaticHandler configuration for restricting access to hidden files fails to restrict access to hidden directories,Check if you run itEPSS 0.50%Oct 22, 2025
- Low2.3In Eclipse Vert.x versions [4.0.0, 4.5.21] and [5.0.0, 5.0.4], when "directory listing" is enabled, file and directory names are inserted into generated HTML without proper escapinCheck if you run itEPSS 0.29%Oct 22, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NIKITAS GEORGOPOULOS WeShare Buttons e-mailit allows Stored XSS.This issue affCheck if you run itEPSS 0.22%Oct 22, 2025
- High8.8Authentication Bypass Using an Alternate Path or Channel vulnerability in Iulia Cazan Emails Catch All emails-catch-all allows Password Recovery Exploitation.This issue affects EmaCheck if you run itEPSS 0.47%Oct 22, 2025
- Medium5.8Insertion of Sensitive Information Into Sent Data vulnerability in inkthemes WP Gmail SMTP wp-gmail-smtp allows Retrieve Embedded Sensitive Data.This issue affects WP Gmail SMTP: fCheck if you run itEPSS 0.30%Oct 22, 2025
- High8.8Deserialization of Untrusted Data vulnerability in Hernan Villanueva Boldermail boldermail allows Object Injection.This issue affects Boldermail: from n/a through <= 2.4.0.Check if you run itEPSS 0.46%Oct 22, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Weboccult Technologies Pvt Ltd Email Attachment by Order Status & Products emaCheck if you run itEPSS 0.25%Oct 22, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ahmad Awais WP Super Edit wp-super-edit allows Reflected XSS.This issue affectCheck if you run itEPSS 0.30%Oct 22, 2025
- High7.5Missing Authorization vulnerability in VibeThemes WPLMS wplms_plugin allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WPLMS: from n/a through <= 1Check if you run itEPSS 0.36%Oct 22, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows DOCheck if you run itEPSS 0.22%Oct 22, 2025
- Medium4.4Server-Side Request Forgery (SSRF) vulnerability in Icegram Icegram Express Pro email-subscribers-premium allows Server Side Request Forgery.This issue affects Icegram Express Pro:Check if you run itEPSS 0.21%Oct 22, 2025
- High8.6Missing Authorization vulnerability in MultiVendorX MultiVendorX dc-woocommerce-multi-vendor allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects MultCheck if you run itEPSS 0.33%Oct 22, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nks Email Subscription Popup email-subscribe allows Stored XSS.This issue affeCheck if you run itEPSS 0.29%Oct 22, 2025
- High8.2Missing Authorization vulnerability in AmentoTech Private Limited WPGuppy wpguppy-lite allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WPGuppy: fCheck if you run itEPSS 0.31%Oct 22, 2025
- Medium5.3Missing Authorization vulnerability in StellarWP WPComplete wpcomplete allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WPComplete: from n/a throuCheck if you run itEPSS 0.34%Oct 22, 2025
- Medium5.3Missing Authorization vulnerability in jjlemstra Whydonate wp-whydonate allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Whydonate: from n/a throuCheck if you run itEPSS 0.34%Oct 22, 2025
- Medium5.3Missing Authorization vulnerability in DELUCKS DELUCKS SEO delucks-seo allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects DELUCKS SEO: from n/a throCheck if you run itEPSS 0.36%Oct 22, 2025
- High7.5Missing Authorization vulnerability in Essekia Tablesome Table Premium tablesome-premium allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects TablesomCheck if you run itEPSS 0.40%Oct 22, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix NULL dereference in ni_write_inode Syzbot reports a NULL dereference in ni_write_inode.Check if you run itEPSS 0.20%Oct 22, 2025
Sort