Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8The Golo - City Travel Guide WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.7.0.Check if you run itEPSS 0.50%Jun 3, 2025
- Medium5.6The Ninja Tables – Easy Data Table Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 5.0.18 via deserialization of untrustedCheck if you run itEPSS 0.50%Jun 3, 2025
- Critical9.8Cross Site Scripting (XSS) vulnerability in MailEnable before v10 allows a remote attacker to execute arbitrary code via the failure.aspx componentCheck this weekEPSS 54.71%Jun 3, 2025
- Unknownroxy-wi roxy-wi Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 28.79%Jun 3, 2025
- Medium6.4The WordPress Comments Import & Export plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the save_settings function in alCheck if you run itEPSS 0.29%Jun 2, 2025
- Medium6.5Missing Authorization vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Accessing Functionality Not Properly ConstrainedCheck if you run itEPSS 0.28%Jun 2, 2025
- Medium5.3HAX open-apis provides microservice apis for HAX webcomponents repo that are shared infrastructure calls.Check if you run itEPSS 0.36%Jun 2, 2025
- Medium4.3A stored cross-site scripting (XSS) vulnerability exists in the Management Console of multiple WSO2 products due to insufficient input validation in the Rich Text Editor within theCheck if you run itEPSS 0.20%Jun 2, 2025
- Medium6.5A server-side request forgery (SSRF) vulnerability exists in multiple WSO2 products due to improper input validation in SOAP admin services.Check if you run itEPSS 0.22%Jun 2, 2025
- Medium5.3MyBB is free and open source forum software.Check if you run itEPSS 0.34%Jun 2, 2025
- High7.5ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx.Check if you run itEPSS 0.83%Jun 2, 2025
- Medium5.5Froxlor is open source server administration software.Check if you run itEPSS 0.34%Jun 2, 2025
- High8.3A security vulnerability in the /apis/dashboard.grafana.app/* endpoints allows authenticated users to bypass dashboard and folder permissions.Check if you run itEPSS 0.56%Jun 2, 2025
- High8.4An issue was found in the private API function qDecodeDataUrl() in QtCore, which is used in QTextDocument and QNetworkReply, and, potentially, in user code.Check if you run itEPSS 0.38%Jun 2, 2025
- High8.8Google Chromium V8 Out-of-Bounds Read and Write VulnerabilityPatch nowKEVEPSS 7.82%Jun 2, 2025
- Medium6.5Tenda AC6 V15.03.05.16 was discovered to contain a stack overflow via the time parameter in the setSmartPowerManagement function.Check if you run itEPSS 0.28%Jun 2, 2025
- High7.5Directory Traversal vulnerability in WebLaudos 24.2 (04) allows a remote attacker to obtain sensitive information via the id parameter.Check if you run itEPSS 1.07%Jun 2, 2025
- Medium6.5Clinical Collaboration Platform 12.2.1.5 has a weak logout system where the session token remains valid after logout and allows a remote attacker to obtain sensitive information anCheck if you run itEPSS 0.34%Jun 2, 2025
- Medium6.5An issue in Clinical Collaboration Platform 12.2.1.5 allows a remote attacker to obtain sensitive information and execute arbitrary code via the usertoken function of default.aspx.Check if you run itEPSS 0.36%Jun 2, 2025
- Medium6.5An issue in Clinical Collaboration Platform 12.2.1.5 allows a remote attacker to obtain sensitive information and execute arbitrary code via the session management component.Check if you run itEPSS 0.36%Jun 2, 2025
- High7.5Qualcomm Multiple Chipsets Use-After-Free VulnerabilityPatch nowKEVEPSS 1.14%Jun 2, 2025
- High8.6Qualcomm Multiple Chipsets Incorrect Authorization VulnerabilityPatch nowKEVEPSS 0.46%Jun 2, 2025
- High8.6Qualcomm Multiple Chipsets Incorrect Authorization VulnerabilityPatch nowKEVEPSS 0.84%Jun 2, 2025
- High7.3A time-based SQL injection vulnerability exists in mydetailsstudent.php in the CloudClassroom PHP Project 1.0.Check if you run itEPSS 0.24%Jun 2, 2025
- High8.8RoundCube Webmail Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 99.71%Jun 1, 2025
Sort