Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Information disclosure vulnerability in error handling in MiR software prior to version 3.0.0 allows unauthenticated attackers to view detailed error information, such as file pathCheck if you run itEPSS 0.29%Aug 20, 2025
- High8.5Missing Authorization vulnerability in favethemes Houzez allows Accessing Functionality Not Properly Constrained by ACLs.Check if you run itEPSS 0.34%Aug 20, 2025
- High7.5Improper Control of Generation of Code ('Code Injection') vulnerability in SaifuMak Add Custom Codes add-custom-codes allows Code Injection.This issue affects Add Custom Codes: froCheck if you run itEPSS 0.37%Aug 20, 2025
- High8.8Incorrect Privilege Assignment vulnerability in Brainstorm Force SureDash suredash allows Privilege Escalation.This issue affects SureDash: from n/a through <= 1.0.3.Check if you run itEPSS 0.36%Aug 20, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Roxnor FundEngine wp-fundraising-donation allows PHP LocalCheck if you run itEPSS 0.62%Aug 20, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Benjamin Denis SEOPress for MainWP seopress-for-mainwp alloCheck if you run itEPSS 0.53%Aug 20, 2025
- High7.5Authorization Bypass Through User-Controlled Key vulnerability in paymayapg Maya Business paymaya-checkout-for-woocommerce allows Accessing Functionality Not Properly Constrained bCheck if you run itEPSS 0.36%Aug 20, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Cozmoslabs Paid Member Subscriptions paid-member-subscriptiCheck if you run itEPSS 0.56%Aug 20, 2025
- Medium5.3Synapse Mobility 8.0, 8.0.1, 8.0.2, 8.1, and 8.1.1 contain a privilege escalation vulnerability through external control of Web parameter.Check if you run itEPSS 0.25%Aug 20, 2025
- Medium6.9Movable Type contains an issue with use of less trusted source.Check if you run itEPSS 0.18%Aug 20, 2025
- Medium5.3During the brief window between installation and the first administrator login, remote attackers may exploit the default credential to gain admin control.Check if you run itEPSS 1.23%Aug 20, 2025
- High8.8The Redirection for Contact Form 7 plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.2.4 via deserialization of untrusted input inCheck if you run itEPSS 0.52%Aug 20, 2025
- Medium5.1A flaw has been found in TOTVS Portal Meu RH up to 12.1.17.Check if you run itEPSS 0.26%Aug 20, 2025
- Medium6.5Tenda AC6 V15.03.06.23_multi was discovered to contain a buffer overflow via the ntpServer parameter in the fromSetSysTime function.Check if you run itEPSS 0.26%Aug 20, 2025
- High7.5Tenda AC6 V15.03.06.23_multi was discovered to contain a buffer overflow via the time parameter in the fromSetSysTime function.Check if you run itEPSS 0.40%Aug 20, 2025
- Medium5.4Meta Platforms WhatsApp Incorrect Authorization VulnerabilityPatch nowKEVEPSS 13.08%Aug 20, 2025
- Medium6.9Microsoft Knack 0.12.0 allows Regular expression Denial of Service (ReDoS) in the knack.introspection module.Check if you run itEPSS 0.36%Aug 20, 2025
- Medium6.5An Origin Validation Error in the elysia-cors library thru 1.3.0 allows attackers to bypass Cross-Origin Resource Sharing (CORS) restrictions.Check if you run itEPSS 0.49%Aug 20, 2025
- High8.8A vulnerability in the password reset workflow of the Touch Lebanon Mobile App 2.20.2 allows an attacker to bypass the OTP reset password mechanism.Check if you run itEPSS 0.36%Aug 20, 2025
- Critical10.0Apple iOS, iPadOS, and macOS Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 65.16%Aug 20, 2025
- UnknownWHMpress whmcs Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 3.29%Aug 20, 2025
- Unknownlangchain langchain Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 47.63%Aug 20, 2025
- UnknownLangChain Experimental '__import__' Arbitrary Code Execution VulnerabilityPatch nowKEVEPSS 1.04%Aug 20, 2025
- Medium4.8A vulnerability was identified in neurobin shc up to 4.0.3.Check if you run itEPSS 0.20%Aug 19, 2025
- Medium5.1A vulnerability was identified in SolidInvoice up to 2.4.0.Check if you run itEPSS 0.30%Aug 19, 2025
Sort