Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low3.8An issue was discovered in Subrion CMS 4.2.1, allowing authenticated adminitrators or moderators with access to the built-in Run SQL Query feature under the SQL Tool admin panel -Check if you run itEPSS 0.20%Sep 11, 2025
- Unknown10web photo_gallery Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 74.61%Sep 11, 2025
- Unknownopsview opsview Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 16.11%Sep 11, 2025
- Medium5.3A weakness has been identified in 299ko up to 2.0.0.Check if you run itEPSS 0.50%Sep 10, 2025
- High7.1Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.Check if you run itEPSS 0.36%Sep 10, 2025
- Medium6.4IBM Security Verify Information Queue 10.0.5, 10.0.6, 10.0.7, and 10.0.8 could allow a privileged user to escalate their privileges and attack surface on the host due to the contaiCheck if you run itEPSS 0.21%Sep 10, 2025
- High7.8Hoverfly is an open source API simulation tool.Check if you run itEPSS 0.71%Sep 10, 2025
- Medium6.2Improper Access Control vulnerability in Liferay Portal 7.4.0 through 7.4.3.124, and Liferay DXP 2024.Q2.0 through 2024.Q2.8, 2024.Q1.1 through 2024.Q1.12 and 7.4 GA through updateCheck if you run itEPSS 0.26%Sep 10, 2025
- Medium5.3A weakness has been identified in yanyutao0402 ChanCMS up to 3.3.0.Check if you run itEPSS 1.33%Sep 10, 2025
- Critical9.8hoverfly hoverfly Improper Input ValidationPatch nowKEVEPSS 10.91%Sep 10, 2025
- High7.1Stalwart is a mail and collaboration server.Check if you run itEPSS 0.35%Sep 10, 2025
- Medium4.4Dell PowerProtect Data Manager, version(s) 19.19 and 19.20, Hyper-V contain(s) a Path Traversal: '.../...//' vulnerability.Check if you run itEPSS 0.16%Sep 10, 2025
- High7.4A vulnerability in the Address Resolution Protocol (ARP) implementation of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to trigger a broadcast storm, leaCheck if you run itEPSS 0.64%Sep 10, 2025
- Medium5.0Dell PowerProtect Data Manager, version(s) 19.19 and 19.20, Hyper-V contain(s) a Plaintext Storage of a Password vulnerability.Check if you run itEPSS 0.11%Sep 10, 2025
- Medium4.3Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask.Check if you run itEPSS 0.26%Sep 10, 2025
- High8.8The Resideo Plugin for Resideo - Real Estate WordPress Theme plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2Check if you run itEPSS 0.33%Sep 10, 2025
- High8.7Through the provision of user names, SolaX Cloud will suggest (similar) user accounts and thereby leak sensitive information such as user email addresses and phone numbers.Check if you run itEPSS 0.33%Sep 10, 2025
- Medium6.3It is possible to bypass the administrator login screen on SolaX Cloud.Check if you run itEPSS 0.34%Sep 10, 2025
- High8.8The upload endpoint insufficiently validates the 'Upload-Key' request header.Check if you run itEPSS 0.71%Sep 10, 2025
- Medium6.4The MyBrain Utilities plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugins's 'mbumap' shortcode in all versions up to, and including, 1.0.8 due to insuCheck if you run itEPSS 0.24%Sep 10, 2025
- High7.7The WP Import – Ultimate CSV XML Importer for WordPress plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'get_ftp_details'Check if you run itEPSS 0.29%Sep 10, 2025
- Medium4.3The Maspik plugin for WordPress is vulnerable to Missing Authorization in version 2.5.6 and prior.Check if you run itEPSS 0.25%Sep 10, 2025
- High8.8The WPGYM - Wordpress Gym Management System plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 67.7.0 via the 'MJ_gmgt_gmgt_add_user'Check if you run itEPSS 0.32%Sep 10, 2025
- High7.5Hardcoded credentials in Dietly v1.25.0 for android allows attackers to gain sensitive information.Check if you run itEPSS 0.30%Sep 10, 2025
- High7.5An issue was discovered in mcp-neo4j 0.3.0 allowing attackers to obtain sensitive information or execute arbitrary commands via the SSE service.Check if you run itEPSS 0.48%Sep 10, 2025
Sort