Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4Missing Authorization vulnerability in Wetail WooCommerce Fortnox Integration woocommerce-fortnox-integration allows Exploiting Incorrectly Configured Access Control Security LevelCheck if you run itEPSS 0.30%Jun 20, 2025
- Medium5.3Missing Authorization vulnerability in Syed Balkhi Giveaways and Contests by RafflePress rafflepress allows Accessing Functionality Not Properly Constrained by ACLs.This issue affeCheck if you run itEPSS 0.31%Jun 20, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in iamapinan PDPA Consent for Thailand pdpa-consent allows Stored XSS.This issueCheck if you run itEPSS 0.26%Jun 20, 2025
- Medium6.5Cross-Site Request Forgery (CSRF) vulnerability in Yamna Khawaja Mailing Group Listserv wp-mailing-group allows Cross Site Request Forgery.This issue affects Mailing Group ListservCheck if you run itEPSS 0.19%Jun 20, 2025
- Critical9.8Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.0.1, contains a missing authorization vulnerability in the NFS export.Check if you run itEPSS 0.50%Jun 20, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: net_sched: prio: fix a race in prio_tune() Gerrard Tai reported a race condition in PRIO, whenever SFQ perturb tCheck if you run itEPSS 0.16%Jun 20, 2025
- High8.7A vulnerability has been found in D-Link DIR-825 2.03 and classified as critical.Check if you run itEPSS 1.33%Jun 20, 2025
- High8.7A vulnerability, which was classified as critical, was found in D-Link DIR-825 2.03.Check if you run itEPSS 1.33%Jun 20, 2025
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 52.19%Jun 20, 2025
- High8.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 1.60%Jun 20, 2025
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.79%Jun 20, 2025
- UnknownImproper Input ValidationPatch nowKEVEPSS 0.60%Jun 20, 2025
- Medium5.7An issue was discovered in the COROS application through 3.8.12 for Android.Check if you run itEPSS 0.16%Jun 20, 2025
- Critical9.3minidvblinux minidvblinux Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 5.55%Jun 20, 2025
- Unknownaviatrix controller Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 1.57%Jun 20, 2025
- Critical9.3SugarCRM sugarcrm Deserialization of Untrusted DataPatch nowKEVEPSS 4.96%Jun 20, 2025
- Critical9.5Meshtastic is an open source mesh networking solution.Check if you run itEPSS 0.60%Jun 19, 2025
- Medium4.8Hydra is a layer-two scalability solution for Cardano.Check if you run itEPSS 0.31%Jun 19, 2025
- High7.0GNU grub2 Execution with Unnecessary PrivilegesPatch nowKEVEPSS 0.48%Jun 19, 2025
- Medium5.4The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized view and modification of data due to an insufficient capability check on thCheck if you run itEPSS 0.30%Jun 19, 2025
- Critical9.1pgai is a Python library that transforms PostgreSQL into a retrieval engine for RAG and Agentic applications.Check if you run itEPSS 0.40%Jun 19, 2025
- Medium6.5OpenList Frontend is a UI component for OpenList.Check if you run itEPSS 0.32%Jun 19, 2025
- Unknownpterodactyl panel Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 54.46%Jun 19, 2025
- Medium6.1The Versa Director SD-WAN orchestration platform provides functionality to upload various types of files.Check if you run itEPSS 0.38%Jun 18, 2025
- Critical9.8The Versa Director SD-WAN orchestration platform which makes use of Cisco NCS application service.Check if you run itEPSS 0.86%Jun 18, 2025
Sort