Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4Cross-Site WebSocket Hijacking vulnerability in Hitachi Ops Center Analyzer (RAID Agent component).This issue affects Hitachi Ops Center Analyzer: from 10.8.0-00 before 11.0.4-00;Check if you run itEPSS 0.14%May 16, 2025
- Medium6.5Bypass Connection Restriction vulnerability in Hitachi Infrastructure Analytics Advisor (Data Center Analytics component), Hitachi Ops Center Analyzer (Hitachi Ops Center AnalyzerCheck if you run itEPSS 0.18%May 16, 2025
- Medium4.8A vulnerability classified as problematic has been found in XU-YIJIE grpo-flat up to 9024b43f091e2eb9bac65802b120c0b35f9ba856.Check if you run itEPSS 0.21%May 16, 2025
- Medium4.8A vulnerability was found in BeamCtrl Airiana up to 11.0.Check if you run itEPSS 0.21%May 16, 2025
- Medium6.4The Posts per Cat [Unmaintained plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ppc' shortcode in all versions up to, and including, 1.4.2 due tCheck if you run itEPSS 0.24%May 16, 2025
- Medium6.9A vulnerability was found in PHPGurukul Daily Expense Tracker 1.1 and classified as critical.Check if you run itEPSS 0.56%May 16, 2025
- Medium5.9Samsung Internet for Galaxy Watch version 5.0.9, available up until Samsung Galaxy Watch 3, does not properly validate TLS certificates, allowing for an attacker to impersonate anyCheck if you run itEPSS 0.30%May 16, 2025
- Medium6.5seaweedfs v3.68 was discovered to contain a SQL injection vulnerability via the component /abstract_sql/abstract_sql_store.go.Check if you run itEPSS 0.26%May 16, 2025
- Medium5.3Zulip is an open-source team chat application.Check if you run itEPSS 0.35%May 15, 2025
- Critical9.1Auth0-PHP provides the PHP SDK for Auth0 Authentication and Management APIs.Check if you run itEPSS 0.54%May 15, 2025
- Medium4.3IBM InfoSphere Information Server 11.7 could disclose sensitive information to an authenticated user that could aid in further attacks against the system through a directory listinCheck if you run itEPSS 0.29%May 15, 2025
- Medium4.3The Sensei LMS WordPress plugin before 4.20.0 disclose all users of the blog including their email address to teachers on the students pageCheck if you run itEPSS 0.40%May 15, 2025
- High8.8The coreActivity: Activity Logging for WordPress plugin before 1.8.1 does not escape some request data when outputting it back in the admin dashboard, allowing unauthenticated userCheck if you run itEPSS 0.71%May 15, 2025
- High7.1The Advanced Schedule Posts WordPress plugin through 2.1.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site ScriptiCheck if you run itEPSS 0.32%May 15, 2025
- Medium5.4The Add SVG Support for Media Uploader | inventivo WordPress plugin through 1.0.5 does not sanitize uploaded SVG files, which could allow users with a role as low as Author to uploCheck if you run itEPSS 0.30%May 15, 2025
- Medium5.4The SVG Uploads Support WordPress plugin through 2.1.1 does not sanitize uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containiCheck if you run itEPSS 0.30%May 15, 2025
- Medium6.1The Allow SVG WordPress plugin before 1.2.0 does not sanitize uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS paylCheck if you run itEPSS 0.39%May 15, 2025
- Medium5.4The LogDash Activity Log WordPress plugin before 1.1.4 hooks the wp_login_failed function (from src/Hooks/Users.php) in order to log failed login attempts to the database but it doCheck if you run itEPSS 0.85%May 15, 2025
- Medium4.8The Travelpayouts: All Travel Brands in One Place WordPress plugin before 1.1.14 does not sanitise and escape a parameter before outputting it back in the page, leading to a ReflecCheck if you run itEPSS 0.39%May 15, 2025
- Medium6.1The Plugin Oficial WordPress plugin through 1.7.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting whichCheck if you run itEPSS 0.58%May 15, 2025
- Medium6.1The Download HTML TinyMCE Button WordPress plugin through 1.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site ScriCheck if you run itEPSS 0.27%May 15, 2025
- Medium6.1The Spiritual Gifts Survey (and optional S.H.A.P.E survey) WordPress plugin through 0.9.10 does not sanitise and escape a parameter before outputting it back in the page, leading tCheck if you run itEPSS 0.17%May 15, 2025
- Medium6.1The Spiritual Gifts Survey (and optional S.H.A.P.E survey) WordPress plugin through 0.9.10 does not sanitise and escape a parameter before outputting it back in the page, leading tCheck if you run itEPSS 0.17%May 15, 2025
- Medium4.8The AI ChatBot for WordPress WordPress plugin before 6.2.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform StoredCheck if you run itEPSS 0.27%May 15, 2025
- Medium5.4The AVIF Uploader WordPress plugin before 1.1.1 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSSCheck if you run itEPSS 0.32%May 15, 2025
Sort