Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8In the Linux kernel, the following vulnerability has been resolved: btrfs: do not allow relocation of partially dropped subvolumes [BUG] There is an internal report that balance trCheck if you run itEPSS 0.18%Sep 11, 2025
- High7.5[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] There are two issues related to the ma…Check if you run itEPSS 0.35%Sep 11, 2025
- High7.5[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] There are two issues related to the ma…Check if you run itEPSS 0.45%Sep 11, 2025
- Critical9.8[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] There are multiple issues related to t…Check if you run itEPSS 0.38%Sep 11, 2025
- Critical9.8[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] There are multiple issues related to t…Check if you run itEPSS 0.48%Sep 11, 2025
- Critical9.8[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] There are multiple issues related to t…Check if you run itEPSS 0.48%Sep 11, 2025
- Medium5.1Stored Cross Site Scripting in Online Fire Reporting System v1.2 by PHPGurukul, that consists in a stored authenticated XSS due to the lack of propper validation of user inputs 'fuCheck if you run itEPSS 0.21%Sep 11, 2025
- Medium5.1Stored Cross Site Scripting in Online Fire Reporting System v1.2 by PHPGurukul, that consists in a stored authenticated XSS due to the lack of propper validation of user inputs 'reCheck if you run itEPSS 0.21%Sep 11, 2025
- Medium5.1Stored Cross Site Scripting in Online Fire Reporting System v1.2 by PHPGurukul, that consists in a stored authenticated XSS due to the lack of propper validation of user inputs 'frCheck if you run itEPSS 0.21%Sep 11, 2025
- Medium5.1Stored Cross Site Scripting in Online Fire Reporting System v1.2 by PHPGurukul, that consists in a reflected and stored authenticated XSS due to the lack of propper validation of uCheck if you run itEPSS 0.21%Sep 11, 2025
- Low2.3A weakness has been identified in DJI Mavic Spark, Mavic Air and Mavic Mini 01.00.0500.Check if you run itEPSS 0.25%Sep 11, 2025
- Critical9.3SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul.Check if you run itEPSS 0.33%Sep 11, 2025
- Critical9.3SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul.Check if you run itEPSS 0.33%Sep 11, 2025
- High8.7A Path Traversal vulnerability in the archive extraction component in Google SecOps SOAR Server (versions 6.3.54.0, 6.3.53.2, and all prior versions) allows an authenticated attackCheck if you run itEPSS 0.63%Sep 11, 2025
- High8.8The My WP Translate plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the ajax_impoCheck if you run itEPSS 0.31%Sep 11, 2025
- High8.0The User Meta – User Profile Builder and User management plugin plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the postInCheck if you run itEPSS 0.58%Sep 11, 2025
- Medium6.5The Smartcat Translator for WPML plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby’ parameter in all versions up to, and including, 3.1.72 due to insuCheck if you run itEPSS 0.32%Sep 11, 2025
- High7.5The Ultimate Classified Listings plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.6 via the 'uclwp_dashboard' shortcode.Check if you run itEPSS 0.97%Sep 11, 2025
- Medium6.4The Countdown Timer for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'countdown_label' Parameter in all versions up to, and including, 1.3.9Check if you run itEPSS 0.24%Sep 11, 2025
- High7.5The Propovoice: All-in-One Client Management System plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.7.6.7 via the send_email() funCheck if you run itEPSS 0.63%Sep 11, 2025
- Medium5.1A weakness has been identified in lokibhardwaj PHP-Code-For-Unlimited-File-Upload up to 124fe96324915490c81eaf7db3234b0b4e4bab3c.Check if you run itEPSS 0.25%Sep 11, 2025
- Medium4.8A security flaw has been discovered in Display Painéis TGA up to 7.1.41.Check if you run itEPSS 0.38%Sep 11, 2025
- Medium4.2In version 0.7.8 of danny-avila/librechat, improper authorization controls in the conversation sharing feature allow unauthorized access to other users' conversations if the converCheck if you run itEPSS 0.31%Sep 11, 2025
- Low3.8An issue was discovered in Subrion CMS 4.2.1, allowing authenticated adminitrators or moderators with access to the built-in Run SQL Query feature under the SQL Tool admin panel -Check if you run itEPSS 0.20%Sep 11, 2025
- Unknown10web photo_gallery Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 74.61%Sep 11, 2025
Sort