Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.Check if you run itEPSS 0.47%Oct 3, 2025
- Medium5.1A command injection vulnerability has been reported to affect several QNAP operating system versions.Check if you run itEPSS 1.33%Oct 3, 2025
- High7.1OpenPLC Runtime v3 contains an input validation flaw in the /upload-program-action endpoint: the epoch_time field supplied during program uploads is not validated and can be crafteCheck if you run itEPSS 0.68%Oct 3, 2025
- Critical9.4When the module renders a Svg file that contains a element, it might end up rendering it recursively leading to stack overflow DoSCheck if you run itEPSS 0.22%Oct 3, 2025
- Medium6.3The Schema Plugin For Divi, Gutenberg & Shortcodes plugin for WordPress is vulnerable to Object Instantiation in all versions up to, and including, 4.3.2 via deserialization of untCheck if you run itEPSS 0.27%Oct 3, 2025
- Medium6.4The Meks Easy Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the post title field in all version up to, and including, 2.1.4.Check if you run itEPSS 0.25%Oct 3, 2025
- Critical9.8beardev joomsport Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 0.66%Oct 3, 2025
- Critical9.8The Appy Pie Connect for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization within the reset_user_password() REST handler in all veCheck if you run itEPSS 0.47%Oct 3, 2025
- High7.5A flaw was found in QEMU.Check if you run itEPSS 0.86%Oct 3, 2025
- Medium5.9Cursor is a code editor built for programming with AI.Check if you run itEPSS 0.29%Oct 3, 2025
- High8.7Claude Code is an agentic coding tool.Check this weekEPSS 27.24%Oct 3, 2025
- Medium5.9A stored Cross-Site Scripting (XSS) vulnerability has been discovered in Emlog Pro 2.5.19.Check if you run itEPSS 0.26%Oct 3, 2025
- Medium5.5CVE-2025-54088 is an open-redirect vulnerability in Secure Access prior to version 14.10.Check if you run itEPSS 0.18%Oct 2, 2025
- High7.1WeGIA is an open source web manager with a focus on charitable institutions.Check if you run itEPSS 0.17%Oct 2, 2025
- Low1.8CVE-2025-54087 is a server-side request forgery vulnerability in Secure Access prior to version 14.10.Check if you run itEPSS 0.18%Oct 2, 2025
- High8.6An unauthenticated debug port may allow access to the device file system.Check if you run itEPSS 0.42%Oct 2, 2025
- Medium5.3CVE-2025-54086 is an excess permissions vulnerability in the Warehouse component of Absolute Secure Access prior to version 14.10.Check if you run itEPSS 0.18%Oct 2, 2025
- Critical9.4WeGIA is a Web manager for charitable institutions.Check if you run itEPSS 0.43%Oct 2, 2025
- High8.8MANTRA is a purpose-built RWA Layer 1 Blockchain, capable of adherence to real world regulatory requirements.Check if you run itEPSS 0.33%Oct 2, 2025
- Critical9.3SQL injection vulnerability in AndSoft's e-TMS v25.03.Check if you run itEPSS 0.35%Oct 2, 2025
- Medium6.9A UNIX Symbolic Link (Symlink) Following vulnerability in logrotate config in the exim package allowed privilege escalation from mail user/group to root.This issue affects TumbleweCheck if you run itEPSS 0.17%Oct 2, 2025
- Medium5.1Incorrect Cross-Origin Resource Sharing (CORS) configuration in Hiberus Sintra.Check if you run itEPSS 0.33%Oct 2, 2025
- Medium5.1Stored XSS vulnerability in Creativeitem Sociopro due to lack of proper validation of user inputs via the endpoint '/sociopro/profile/update_profile', affecting to 'name' parameterCheck if you run itEPSS 0.36%Oct 2, 2025
- Medium5.1Stored Cross Site Scripting vulnerability in Ekushey CRM v5.0 by Creativeitem, due to lack of proper validation of user inputs via the "/ekushey/index.php/client/project_file/uploaCheck if you run itEPSS 0.21%Oct 2, 2025
- Medium5.1Stored Cross Site Scripting vulnerability in Ekushey CRM v5.0 by Creativeitem, due to lack of proper validation of user inputs via the "/ekushey/index.php/client/project_bug/createCheck if you run itEPSS 0.21%Oct 2, 2025
Sort