Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.6Missing Authorization vulnerability in Md Yeasin Ul Haider URL Shortener exact-links allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects URL ShorteneCheck if you run itEPSS 0.37%Jul 16, 2025
- High7.5Missing Authorization vulnerability in August Infotech Multi-language Responsive Contact Form responsive-contact-form allows Accessing Functionality Not Properly Constrained by ACLCheck if you run itEPSS 0.43%Jul 16, 2025
- Medium5.3Missing Authorization vulnerability in enituretechnology Residential Address Detection residential-address-detection allows Accessing Functionality Not Properly Constrained by ACLsCheck if you run itEPSS 0.31%Jul 16, 2025
- Medium5.3Missing Authorization vulnerability in sminozzi Stop and Block bots plugin Anti bots antibots allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects StoCheck if you run itEPSS 0.31%Jul 16, 2025
- Critical10.0Cisco Identity Services Engine Injection VulnerabilityPatch nowKEVEPSS 74.50%Jul 16, 2025
- Medium4.3Certain instructions need intercepting and emulating by Xen.Check if you run itEPSS 0.70%Jul 16, 2025
- High8.1The Malcure Malware Scanner — #1 Toolset for WordPress Malware Removal plugin for WordPress is vulnerable to Arbitrary File Deletion due to a missing capability check on the wpmr_dCheck if you run itEPSS 0.67%Jul 16, 2025
- Medium6.8Use of hard-coded credentials issue exists in ZWX-2000CSW2-HN prior to 0.3.19 and ZWX-2000CS2-HN firmware all versions.Check if you run itEPSS 0.23%Jul 16, 2025
- UnknownMissing AuthorizationPatch nowKEVEPSS 0.32%Jul 16, 2025
- UnknownCisco Identity Services Engine Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.74%Jul 16, 2025
- High8.9GPT-SoVITS-WebUI is a voice conversion and text-to-speech webUI.Check if you run itEPSS 0.76%Jul 15, 2025
- High8.9GPT-SoVITS-WebUI is a voice conversion and text-to-speech webUI.Check if you run itEPSS 0.76%Jul 15, 2025
- High7.1Conjur provides secrets management and application identity for infrastructure.Check if you run itEPSS 0.61%Jul 15, 2025
- High8.2Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Check if you run itEPSS 0.28%Jul 15, 2025
- High8.2Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Check if you run itEPSS 0.28%Jul 15, 2025
- High8.2Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Check if you run itEPSS 0.29%Jul 15, 2025
- Medium4.4Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: LDAP Auth).Check if you run itEPSS 0.48%Jul 15, 2025
- Medium4.9Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Check if you run itEPSS 0.58%Jul 15, 2025
- Medium4.9Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Check if you run itEPSS 0.58%Jul 15, 2025
- Low2.2Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling).Check if you run itEPSS 0.44%Jul 15, 2025
- Medium4.9Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Check if you run itEPSS 0.58%Jul 15, 2025
- Low2.7Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Check if you run itEPSS 0.52%Jul 15, 2025
- Medium4.9Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services).Check if you run itEPSS 0.64%Jul 15, 2025
- Medium5.5Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Check if you run itEPSS 0.52%Jul 15, 2025
- Medium4.9Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Check if you run itEPSS 0.64%Jul 15, 2025
Sort