Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix WARNING "do not call blocking ops when !TASK_RUNNING" wait_event_timeout() will set the state of theCheck if you run itEPSS 0.36%May 8, 2025
- High7.5The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 4.0.26 via theCheck if you run itEPSS 0.73%May 8, 2025
- High8.8ALFA AIP-W512 v3.2.2.2.3 was discovered to contain an authenticated stack overflow via the torrentsindex parameter in the formBTClinetSetting function.Check if you run itEPSS 0.62%May 8, 2025
- High8.8TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid5g parameter in the setWiFiEasyGuestCfg function.Check if you run itEPSS 0.71%May 8, 2025
- High8.8TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiBasicCfg function.Check if you run itEPSS 0.71%May 8, 2025
- High8.8TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid parameter in the setWiFiGuestCfg function.Check if you run itEPSS 0.71%May 8, 2025
- High8.8TOTOLINK NR1800X V9.1.0u.6681_B20230703 was discovered to contain an authenticated stack overflow via the ssid5g parameter in the setWiFiEasyCfg function.Check if you run itEPSS 0.91%May 8, 2025
- Medium5.3An issue was discovered in Django 4.2 before 4.2.21, 5.1 before 5.1.9, and 5.2 before 5.2.1.Check this weekEPSS 14.31%May 8, 2025
- High7.5An issue was discovered in Znuny through 7.1.3.Check if you run itEPSS 0.36%May 8, 2025
- Low2.0i-Educar is free, fully online school management software.Check if you run itEPSS 0.26%May 7, 2025
- High7.5Rack is a modular Ruby web server interface.Check if you run itEPSS 1.21%May 7, 2025
- Critical9.2On an F5OS system, if the root user had previously configured the system to allow login via SSH key-based authentication, and then enabled Appliance Mode; access via SSH key-basedCheck if you run itEPSS 0.44%May 7, 2025
- Medium5.3Envoy is a cloud-native edge/middle/service proxy.Check if you run itEPSS 0.27%May 7, 2025
- Medium6.1An admin user can gain unauthorized write access to the /etc/rc.local file on the device, which is executed on a system boot.Check if you run itEPSS 0.35%May 7, 2025
- High8.5BrightSign players running BrightSign OS series 4 prior to v8.5.53.1 or series 5 prior to v9.0.166 contain an execution with unnecessary privileges vulnerability, allowing for privCheck if you run itEPSS 0.19%May 7, 2025
- Medium5.4A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, low-privileged, remote attacker to perform an injection attack againstCheck if you run itEPSS 0.33%May 7, 2025
- High8.8A vulnerability in the web-based management interface of the Wireless LAN Controller feature of Cisco IOS XE Software could allow an authenticated, remote attacker with a lobby ambCheck if you run itEPSS 0.91%May 7, 2025
- High7.8A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, local attacker to gain privileges of the root user on theCheck if you run itEPSS 0.15%May 7, 2025
- Critical9.3sysaid sysaid Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 72.66%May 7, 2025
- Medium5.4Cross-Site Request Forgery (CSRF) vulnerability in Smaily Smaily for WP smaily-for-wp allows Cross Site Request Forgery.This issue affects Smaily for WP: from n/a through <= 3.1.7.Check if you run itEPSS 0.15%May 7, 2025
- High7.2Deserialization of Untrusted Data vulnerability in Florent Maillefaud WP Maintenance wp-maintenance allows Object Injection.This issue affects WP Maintenance: from n/a through <= 6Check if you run itEPSS 0.53%May 7, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Faiyaz Alam User Login History user-login-history allows Stored XSS.This issueCheck if you run itEPSS 0.22%May 7, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Raihanul Islam Awesome Gallery awesome-gallery allows Stored XSS.This issue afCheck if you run itEPSS 0.26%May 7, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in apasionados Email Notification on Login email-notification-on-login allows StoCheck if you run itEPSS 0.27%May 7, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SendPulse SendPulse Email Marketing Newsletter sendpulse-email-marketing-newslCheck if you run itEPSS 0.26%May 7, 2025
Sort