Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Missing Authorization vulnerability in OLIVESYSTEM 診断ジェネレータ作成プラグイン os-diagnosis-generator allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects 診断ジェネレーCheck if you run itEPSS 0.30%Jun 6, 2025
- Medium5.3Missing Authorization vulnerability in taskbuilder Taskbuilder taskbuilder allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Taskbuilder: from n/aCheck if you run itEPSS 0.34%Jun 6, 2025
- Medium5.4Server-Side Request Forgery (SSRF) vulnerability in SmartDataSoft Car Repair Services car-repair-services allows Server Side Request Forgery.This issue affects Car Repair Services:Check if you run itEPSS 0.25%Jun 6, 2025
- Medium5.3Missing Authorization vulnerability in Mario Peshev WP-CRM System wp-crm-system allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP-CRM System: frCheck if you run itEPSS 0.32%Jun 6, 2025
- Medium5.3Missing Authorization vulnerability in raychat Raychat raychat allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Raychat: from n/a through <= 2.1.0Check if you run itEPSS 0.32%Jun 6, 2025
- Medium4.8Stored Cross-Site Scripting (XSS) vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04.Check if you run itEPSS 0.37%Jun 6, 2025
- Medium5.1In IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04, a configuration error has been detected in cross-origin resource sharing (CORS).Check if you run itEPSS 0.36%Jun 6, 2025
- Medium5.1Code injection vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04.Check if you run itEPSS 0.38%Jun 6, 2025
- Medium5.1Stored Cross-Site Scripting (XSS) vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04.Check if you run itEPSS 0.36%Jun 6, 2025
- Medium5.3In IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04, a configuration error has been detected in cross-origin resource sharing (CORS).Check if you run itEPSS 0.33%Jun 6, 2025
- Medium5.3Code injection vulnerability in IDF v0.10.0-0C03-03 and ZLF v0.10.0-0C03-04.Check if you run itEPSS 0.38%Jun 6, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Abu Huraira Bin Aman WidgetKit widgetkit-for-elementor allows Stored XSS.ThisCheck if you run itEPSS 0.20%Jun 6, 2025
- Medium6.9A vulnerability classified as critical was found in PHPGurukul Local Services Search Engine Management System 2.1.Check if you run itEPSS 0.51%Jun 6, 2025
- Medium6.9A vulnerability was found in SourceCodester Open Source Clinic Management System 1.0.Check if you run itEPSS 0.44%Jun 6, 2025
- High8.7An external control of file name or path vulnerability in the download file function of Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remoteCheck if you run itEPSS 0.45%Jun 6, 2025
- Critical9.8A missing protection against path traversal allows to access any file on the server.Check if you run itEPSS 0.62%Jun 6, 2025
- Critical9.8The WP Email Debug plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the WPMDBUG_handle_settings() function in versions 1.0 to 1.1.0.Check if you run itEPSS 0.50%Jun 6, 2025
- Medium5.5The Developer Formatter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Custom CSS in all versions up to, and including, 2015.0.2.1 due to insufficient inCheck if you run itEPSS 0.29%Jun 6, 2025
- Medium5.4The Hive Support | AI-Powered Help Desk, Live Chat & AI Chat Bot Plugin for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and inCheck if you run itEPSS 0.17%Jun 6, 2025
- Medium4.0Resource allocation control failure vulnerability in the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability.Check if you run itEPSS 0.11%Jun 6, 2025
- Medium5.3The Modern Events Calendar Lite plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 7.21.9.Check if you run itEPSS 0.34%Jun 6, 2025
- Medium4.3IBM Verify Identity Access Digital Credentials 24.06 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browseCheck if you run itEPSS 0.33%Jun 6, 2025
- Unknownwpdevart poll\,_survey\,_questionnaire_and_voting_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 46.00%Jun 6, 2025
- Medium5.3A vulnerability classified as critical was found in Shenzhen Dashi Tongzhou Information Technology AgileBPM up to 2.5.0.Check if you run itEPSS 0.53%Jun 5, 2025
- Medium5.3A vulnerability classified as critical has been found in Shenzhen Dashi Tongzhou Information Technology AgileBPM up to 2.5.0.Check if you run itEPSS 0.53%Jun 5, 2025
Sort