Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low3.9A vulnerability has been identified in the libarchive library.Check if you run itEPSS 0.21%Jun 9, 2025
- High8.0Exposure of sensitive data in active sessions in Lablup's BackendAI allows attackers to retrieve credentials for users on the management platform.Check if you run itEPSS 0.35%Jun 9, 2025
- Critical9.8Missing Authentication in the registration feature of Lablup's BackendAI allows arbitrary users to create user accounts that can access private data even when registration is disabCheck if you run itEPSS 0.43%Jun 9, 2025
- High8.1Missing Authorization in Lablup's BackendAI allows attackers to takeover all active sessions; Accessing, stealing, or altering any data accessible in the session.Check if you run itEPSS 0.34%Jun 9, 2025
- Critical9.1listmonk is a standalone, self-hosted, newsletter and mailing list manager.Check if you run itEPSS 1.58%Jun 9, 2025
- Critical9.3Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in facturaone TicketBAI Facturas para WooCommerce wp-ticketbai allows Blind SQL ICheck if you run itEPSS 0.42%Jun 9, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in brewlabs WP Email Delivery wp-email-delivery allows Reflected XSS.This issue aCheck if you run itEPSS 0.28%Jun 9, 2025
- High7.1Missing Authorization vulnerability in Icegram Icegram Collect icegram-rainmaker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IcegramCheck if you run itEPSS 0.34%Jun 9, 2025
- Medium6.5Missing Authorization vulnerability in relentlo StyleAI relentlosoftware allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects StyleAI: from n/a througCheck if you run itEPSS 0.24%Jun 9, 2025
- High7.5Missing Authorization vulnerability in WP Swings Membership For WooCommerce membership-for-woocommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue afCheck if you run itEPSS 0.34%Jun 9, 2025
- Critical10.0WilderForge is a Wildermyth coremodding API.Check if you run itEPSS 0.79%Jun 9, 2025
- Medium6.3FastGPT is an open-source project that provides a platform for building, deploying, and operating AI-driven workflows and conversational agents.Check if you run itEPSS 0.45%Jun 9, 2025
- High8.2Wasp (Web Application Specification) is a Rails-like framework for React, Node.js, and Prisma.Check if you run itEPSS 0.44%Jun 9, 2025
- High7.1Discourse is an open-source discussion platform.Check if you run itEPSS 0.28%Jun 9, 2025
- High8.7Discourse is an open-source discussion platform.Check if you run itEPSS 0.37%Jun 9, 2025
- High8.7A vulnerability classified as critical has been found in TP-LINK Technologies TL-IPC544EP-W4 1.0.9 Build 240428 Rel 69493n.Check if you run itEPSS 1.03%Jun 9, 2025
- Medium5.7The AuthPolicy metadata on Red Hat Connectivity Link contains an object which stores secretes, however it assumes those secretes are already in the kuadrant-system instead of copyiCheck if you run itEPSS 0.21%Jun 9, 2025
- Medium6.1The Broadstreet WordPress plugin before 1.51.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which couCheck if you run itEPSS 0.51%Jun 9, 2025
- Medium6.5A flaw exists in the nbdkit "blocksize" filter that can be triggered by a specific type of client request.Check if you run itEPSS 0.49%Jun 9, 2025
- Medium5.3A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0.Check if you run itEPSS 0.41%Jun 9, 2025
- Medium6.9A vulnerability has been found in PHPGurukul BP Monitoring Management System 1.0 and classified as critical.Check if you run itEPSS 0.55%Jun 9, 2025
- Medium5.4Silverpeas 6.4.2 contains a stored cross-site scripting (XSS) vulnerability in the event management module.Check if you run itEPSS 0.31%Jun 9, 2025
- High7.5react-native-keys 0.7.11 is vulnerable to sensitive information disclosure (remote) as encryption cipher and Base64 chunks are stored as plaintext in the compiled native binary.Check if you run itEPSS 0.19%Jun 9, 2025
- UnknownUse of Default PasswordPatch nowKEVEPSS 2.40%Jun 8, 2025
- UnknownOracle Retail Xstore Office Pre-Authentication Path TraversalPatch nowKEVEPSS 1.78%Jun 8, 2025
Sort