Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.7Dell PowerProtect Data Domain appliances with Data Domain Operating System (DD OS) of Feature Release versions 8.0 through 8.5, LTS2025 release version 8.3.1.0 through…Check if you run itEPSS 0.33%Apr 17, 2026
- High7.8Dell PowerProtect Data Domain BoostFS for client of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release ver…Check if you run itEPSS 0.11%Apr 17, 2026
- Critical9.5Unauthenticated user is able to execute arbitrary SQL commands in Sparx Pro Cloud Server database in certain cases.Check if you run itEPSS 0.42%Apr 17, 2026
- Critical9.3Plaintext Storage of a Password vulnerability in Sparx Systems Pty Ltd.Check if you run itEPSS 0.38%Apr 17, 2026
- Critical9.3Exposure of Private Personal Information to an Unauthorized Actor, : Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Sparx…Check if you run itEPSS 0.26%Apr 17, 2026
- Medium6.2Insufficiently Protected Credentials vulnerability in Sparx Systems Pty Ltd.Check if you run itEPSS 0.15%Apr 17, 2026
- Medium4.3The cms-fuer-motorrad-werkstaetten plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to and including 1.0.0.Check if you run itEPSS 0.22%Apr 17, 2026
- High8.8Red Magic 11 Pro (NX809J) contains a vulnerability that allows non-privileged applications to trigger sensitive operations.Check if you run itEPSS 0.12%Apr 17, 2026
- High7.2In JetBrains YouTrack before 2025.3.131383 high privileged user can achieve RCE via sandbox bypassCheck if you run itEPSS 0.43%Apr 17, 2026
- High8.4Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.…Check if you run itEPSS 0.16%Apr 17, 2026
- Critical9.8All plugins by Essentialplugin for WordPress are vulnerable to an injected backdoor in various versions.Check if you run itEPSS 0.50%Apr 17, 2026
- Medium4.3The Canto plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 3.1.1.Check if you run itEPSS 0.28%Apr 17, 2026
- High7.5The Unlimited Elements for Elementor plugin for WordPress is vulnerable to Arbitrary File Read via the Repeater JSON/CSV URL parameter in versions up to, and including, 2.0.6.Check if you run itEPSS 0.90%Apr 17, 2026
- High8.5The Rapid7 Insight Agent (versions > 4.1.0.2) is vulnerable to a local privilege escalation attack that allows users to gain SYSTEM level control of a Windows host.Check if you run itEPSS 0.18%Apr 17, 2026
- Medium6.4A vulnerability has been found in Mobatek MobaXterm Home Edition up to 26.1.Check if you run itEPSS 0.15%Apr 17, 2026
- Medium5.3The Quiz And Survey Master plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to and including 11.1.0.Check if you run itEPSS 0.52%Apr 17, 2026
- Medium5.1A path traversal vulnerability exists in CubeCart prior to 6.6.0, which may allow a user with an administrative privilege to access higher-level directories that shoul…Check if you run itEPSS 0.32%Apr 17, 2026
- Medium5.1An SQL injection vulnerability exists in CubeCart prior to 6.6.0, which may allow an attacker to execute an arbitrary SQL statement on the product.Check if you run itEPSS 0.18%Apr 17, 2026
- High8.6An OS command injection vulnerability exists in CubeCart prior to 6.6.0, which may allow a user with an administrative privilege to execute an arbitrary OS command.Check if you run itEPSS 1.20%Apr 17, 2026
- Medium6.5The Tutor LMS plugin for WordPress is vulnerable to SQL Injection in versions up to and including 3.9.8.Check if you run itEPSS 0.50%Apr 17, 2026
- Medium5.3The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthorized course content manipulation in versions up to and including 3.9.8.Check if you run itEPSS 0.46%Apr 17, 2026
- Medium5.3The Kubio plugin for WordPress is vulnerable to Arbitrary File Upload in versions up to and including 2.7.2.Check if you run itEPSS 0.54%Apr 17, 2026
- Medium5.3The LatePoint plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.3.2.Check if you run itEPSS 0.69%Apr 17, 2026
- Medium4.9The JetBackup – Backup, Restore & Migrate plugin for WordPress is vulnerable to Path Traversal leading to Arbitrary Directory Deletion in versions up to and including 3.1.19.8.Check if you run itEPSS 0.71%Apr 17, 2026
- Medium4.9The Form Maker by 10Web plugin for WordPress is vulnerable to SQL Injection via the 'ip_search', 'startdate', 'enddate', 'username_search', and 'useremail_search' para…Check if you run itEPSS 0.43%Apr 17, 2026
Sort