Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.6A logging issue was addressed with improved data redaction.Check if you run itEPSS 0.63%May 12, 2025
- High7.8The issue was addressed with additional permissions checks.Check if you run itEPSS 0.20%May 12, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Edward Caissie BNS Twitter Follow Button bns-twitter-follow-button allows DOM-Check if you run itEPSS 0.21%May 12, 2025
- Medium6.1VMware Tools contains an insecure file handling vulnerability.Check if you run itEPSS 0.27%May 12, 2025
- Low2.1julmud/phpDVDProfiler is an adoption of the defunct phpDVDProfiler project, which allows users to display on the web their DVD collections maintained with Invelos's DVDProfiler sofCheck if you run itEPSS 0.49%May 12, 2025
- High7.0EspoCRM is a free, open-source customer relationship management platform.Check if you run itEPSS 0.38%May 12, 2025
- Medium5.1Reflected cross-site scripting vulnerability exists in the laser printers and MFPs (multifunction printers) which implement Ricoh Web Image Monitor.Check if you run itEPSS 0.69%May 12, 2025
- Medium6.9The ISOinsight from Netvision has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to access certain system functions.Check if you run itEPSS 0.35%May 12, 2025
- Medium5.9The Firelight Lightbox WordPress plugin before 2.3.15 does not prevent users with post writing capabilities from executing arbitrary Javascript when the jQuery Metadata library isCheck if you run itEPSS 0.32%May 12, 2025
- Medium6.9A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0.Check if you run itEPSS 0.56%May 12, 2025
- Medium6.9A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0 and classified as critical.Check if you run itEPSS 0.56%May 12, 2025
- Medium6.5Tenda FH451 V1.0.0.9 is vulnerable to Remote Code Execution in the formSafeEmailFilter function.Check this weekEPSS 10.66%May 12, 2025
- Unknownwavlink wl-wn533a8_firmware Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 3.10%May 12, 2025
- UnknownSmart Office Web Action Name Parameter Information Disclosure VulnerabilityPatch nowKEVEPSS 59.41%May 12, 2025
- Medium6.9A vulnerability, which was classified as critical, has been found in PHPGurukul Apartment Visitors Management System 1.0.Check if you run itEPSS 0.57%May 11, 2025
- Low2.3A vulnerability, which was classified as problematic, has been found in Freeebird Hotel 酒店管理系统 API up to 1.2.Check if you run itEPSS 0.28%May 11, 2025
- High7.3A vulnerability was found in Hainan ToDesk 4.7.6.3.Check if you run itEPSS 0.22%May 11, 2025
- Medium5.1A vulnerability classified as problematic was found in JeecgBoot up to 3.8.0.Check if you run itEPSS 0.79%May 11, 2025
- High7.3A vulnerability classified as critical has been found in Shanghai Bairui Information Technology SunloginClient 15.8.3.19819.Check if you run itEPSS 0.20%May 11, 2025
- Medium6.4Lumi H5P-Nodejs-library before 9.3.3 omits a sanitizeHtml call for plain text strings.Check if you run itEPSS 0.31%May 11, 2025
- Medium5.3A vulnerability, which was classified as problematic, was found in Zylon PrivateGPT up to 0.6.2.Check if you run itEPSS 0.36%May 10, 2025
- Medium5.3A vulnerability was found in vector4wang spring-boot-quick up to 20250422.Check if you run itEPSS 0.57%May 10, 2025
- High8.8The SMS Alert Order Notifications – WooCommerce plugin for WordPress is vulnerable to Privilege Escalation due to insufficient user OTP validation in the handleWpLoginCreateUserActCheck if you run itEPSS 0.46%May 10, 2025
- High8.8The WordPress Review Plugin: The Ultimate Solution for Building a Review Website plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.Check if you run itEPSS 0.88%May 10, 2025
- High7.5IBM Storage Scale 5.2.2.0 and 5.2.2.1, under certain configurations, could allow an authenticated user to execute privileged commands due to improper input neutralization.Check if you run itEPSS 0.43%May 10, 2025
Sort