Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0.Check if you run itEPSS 0.39%Jul 19, 2025
- High7.2The Subscribe to Comments for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 2.1.2 via the Path to header value.Check if you run itEPSS 2.42%Jul 19, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: net/sched: Always pass notifications when child class becomes empty Certain classful qdiscs may invoke their claCheck if you run itEPSS 0.30%Jul 19, 2025
- High7.5Prettier eslint-config-prettier Embedded Malicious Code VulnerabilityPatch nowKEVEPSS 5.13%Jul 19, 2025
- Medium5.6In wolfSSL release 5.8.2 blinding support is turned on by default for Curve25519 in applicable builds.Check if you run itEPSS 0.22%Jul 18, 2025
- Critical9.2A certificate verification error in wolfSSL when building with the WOLFSSL_SYS_CA_CERTS and WOLFSSL_APPLE_NATIVE_CERT_VALIDATION options results in the wolfSSL client failing to prCheck if you run itEPSS 0.27%Jul 18, 2025
- Medium5.1A vulnerability was found in descreekert wx-discuz up to 12bd4745c63ec203cb32119bf77ead4a923bf277.Check if you run itEPSS 0.31%Jul 18, 2025
- Medium5.1A vulnerability was found in PHPGurukul Complaint Management System 2.0 and classified as problematic.Check if you run itEPSS 0.31%Jul 18, 2025
- Medium5.1A vulnerability classified as problematic was found in cgpandey hotelmis up to c572198e6c4780fccc63b1d3e8f3f72f825fc94e.Check if you run itEPSS 0.28%Jul 18, 2025
- High8.7A vulnerability was found in Tenda FH451 1.0.0.9.Check if you run itEPSS 1.26%Jul 18, 2025
- High8.3MDC is a tool to take regular Markdown and write documents interacting deeply with a Vue component.Check if you run itEPSS 0.34%Jul 18, 2025
- Medium4.4melange allows users to build apk packages using declarative pipelines.Check if you run itEPSS 0.15%Jul 18, 2025
- High7.0apko allows users to build and publish OCI container images built from apk packages.Check if you run itEPSS 0.14%Jul 18, 2025
- Medium6.6RIOT-OS, an operating system that supports Internet of Things devices, has an ineffective size check implemented with can lead to buffer overflow in versions up to and including 20Check if you run itEPSS 0.86%Jul 18, 2025
- Medium6.3A vulnerability was found in Xuxueli xxl-job up to 3.1.1 and classified as problematic.Check if you run itEPSS 0.33%Jul 18, 2025
- Medium5.3A vulnerability has been found in Xuxueli xxl-job up to 3.1.1 and classified as critical.Check if you run itEPSS 4.95%Jul 18, 2025
- Medium5.3A vulnerability, which was classified as critical, was found in Xuxueli xxl-job up to 3.1.1.Check if you run itEPSS 0.50%Jul 18, 2025
- Medium5.3A vulnerability classified as problematic was found in thinkgem JeeSite up to 5.12.0.Check if you run itEPSS 0.48%Jul 18, 2025
- Low2.2Mattermost versions 10.5.x <= 10.5.7, 9.11.x <= 9.11.16 fail to negotiate a new token when accepting the invite which allows a user that intercepts both invite and password to sendCheck if you run itEPSS 0.22%Jul 18, 2025
- Medium5.1A reflected XSS vulnerability in RSMail! component 1.19.20 - 1.22.26 28 Joomla was discovered.Check if you run itEPSS 0.44%Jul 18, 2025
- Medium6.8Mattermost versions 10.8.x <= 10.8.1, 10.7.x <= 10.7.3, 10.5.x <= 10.5.7, 9.11.x <= 9.11.16 fail to sanitize input paths of file attachments in the bulk import JSONL file, which alCheck if you run itEPSS 0.45%Jul 18, 2025
- Medium6.5Mattermost versions 10.5.x <= 10.5.6, 10.8.x <= 10.8.1, 10.7.x <= 10.7.3, 9.11.x <= 9.11.16 fail to verify authorization when retrieving cached posts by PendingPostID which allowsCheck if you run itEPSS 0.37%Jul 18, 2025
- High7.6An open redirect vulnerability has been identified in Grafana OSS that can be exploited to achieve XSS attacks.Check this weekEPSS 57.74%Jul 18, 2025
- Medium4.3The Copymatic – AI Content Writer & Generator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.Check if you run itEPSS 0.14%Jul 18, 2025
- High8.8The aapanel WP Toolkit plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization checks within the auto_login() function in versions 1.0 to 1.1.Check if you run itEPSS 0.44%Jul 18, 2025
Sort