Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1CoreDNS is a DNS server that chains plugins.Check if you run itEPSS 0.51%Sep 9, 2025
- Medium6.1CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')Check if you run itEPSS 0.19%Sep 9, 2025
- Medium6.5CWE-328: Use of Weak HashCheck if you run itEPSS 0.25%Sep 9, 2025
- Medium4.3CWE-200 Exposure of Sensitive Information to an Unauthorized ActorCheck if you run itEPSS 0.29%Sep 9, 2025
- Critical10.0CWE-1392: Use of Default CredentialsCheck if you run itEPSS 0.34%Sep 9, 2025
- Critical9.8CWE-1242: Inclusion of Undocumented FeaturesCheck if you run itEPSS 0.34%Sep 9, 2025
- Critical9.1Use of Default Cryptographic Key (CWE-1394)Check if you run itEPSS 0.30%Sep 9, 2025
- Critical9.8Multiple CWE-78Check if you run itEPSS 0.56%Sep 9, 2025
- High8.4CWE-798 Use of Hard-coded CredentialsCheck if you run itEPSS 0.14%Sep 9, 2025
- Critical10.0XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence.Check if you run itEPSS 0.79%Sep 9, 2025
- Medium6.9lmsys sglang Improper Input ValidationPatch nowKEVEPSS 0.41%Sep 9, 2025
- High7.8Sunshine for Windows, version v2025.122.141614, contains a DLL search-order hijacking vulnerability, allowing attackers to insert a malicious DLL in user-writeable PATH directoriesCheck if you run itEPSS 0.22%Sep 9, 2025
- Medium4.3Protection mechanism failure in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network.Check if you run itEPSS 0.95%Sep 9, 2025
- Medium5.5Generation of error message containing sensitive information in Windows Kernel allows an authorized attacker to disclose information locally.Check if you run itEPSS 0.66%Sep 9, 2025
- Medium5.3Missing Authorization vulnerability in recorp Export WP Page to Static HTML/CSS export-wp-page-to-static-html allows Accessing Functionality Not Properly Constrained by ACLs.This iCheck if you run itEPSS 0.23%Sep 9, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pixeline Pixeline's Email Protector pixelines-email-protector allows Stored XSCheck if you run itEPSS 0.18%Sep 9, 2025
- High7.2A heap-buffer-overflow write exists in jpeg2000dec FFmpeg which allows an attacker to potentially gain remote code execution or cause denial of service via the channel…Check if you run itEPSS 0.44%Sep 9, 2025
- Low3.1A flaw was found in libssh's handling of key exchange (KEX) processes when a client repeatedly sends incorrect KEX guesses.Check if you run itEPSS 0.43%Sep 9, 2025
- Medium5.3A SQL injection vulnerability has been identified in the SMPP server component of the SMSEagle firmware, specifically affecting the handling of certain parameters within the serverCheck if you run itEPSS 0.23%Sep 9, 2025
- High8.7A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), User ManagCheck if you run itEPSS 0.54%Sep 9, 2025
- High8.7A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), User ManagCheck if you run itEPSS 0.54%Sep 9, 2025
- High8.7A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), User ManagCheck if you run itEPSS 0.50%Sep 9, 2025
- Critical9.3A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC PCS neo V6.0 (All versions < V6.0 SP1 Update 1), User ManagCheck if you run itEPSS 0.72%Sep 9, 2025
- Low3.5The AI ChatBot for WordPress WordPress plugin before 7.1.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform StoredCheck if you run itEPSS 0.26%Sep 9, 2025
- Low2.0A weakness has been identified in SourceCodester Simple To-Do List System 1.0.Check if you run itEPSS 0.32%Sep 9, 2025
Sort