Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gopiplus@hotmail.com Anything Popup anything-popup allows Reflected XSS.This iCheck if you run itEPSS 0.29%Apr 24, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Ashraful Sarkar Naiem License For Envato license-envato allCheck if you run itEPSS 0.76%Apr 24, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows StCheck if you run itEPSS 0.28%Apr 24, 2025
- Medium6.5A flaw was found in libsoup.Check if you run itEPSS 0.59%Apr 24, 2025
- High8.1Due to improper JSON Web Tokens implementation an unauthenticated remote attacker can guess a valid session ID and therefore impersonate a user to gain full access.Check if you run itEPSS 0.46%Apr 24, 2025
- Critical9.8The Flynax Bridge plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.2.0.Check if you run itEPSS 0.56%Apr 24, 2025
- Medium4.2The Buddypress Force Password Change plugin for WordPress is vulnerable to authenticated account takeover due to the plugin not properly validating a user's identity prior to updatCheck if you run itEPSS 0.22%Apr 24, 2025
- High7.2The WPMasterToolKit (WPMTK) – All in one plugin plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.5.2.Check if you run itEPSS 0.89%Apr 24, 2025
- High8.8The Frontend Login and Registration Blocks plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.0.8.Check if you run itEPSS 0.45%Apr 24, 2025
- Critical9.8The Flynax Bridge plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.2.0.Check if you run itEPSS 0.73%Apr 24, 2025
- Medium4.3The Woocommerce Automatic Order Printing | ( Formerly WooCommerce Google Cloud Print) plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to,Check if you run itEPSS 0.28%Apr 24, 2025
- High8.8The Xelion Webchat plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the xwc_save_sCheck if you run itEPSS 0.48%Apr 24, 2025
- Medium4.3An issue has been discovered in access controls could allow users to view certain restricted project information even when related features are disabled in GitLab EE, affecting allCheck if you run itEPSS 0.31%Apr 24, 2025
- Medium6.5An issue has been discovered affecting service availability via issue preview in GitLab CE/EE affecting all versions from 16.7 before 17.9.7, 17.10 before 17.10.5, and 17.11 beforeCheck if you run itEPSS 0.46%Apr 24, 2025
- Low3.1Mattermost versions 10.4.x <= 10.4.2, 10.5.x <= 10.5.0, 9.11.x <= 9.11.10 fail to properly validate permissions for the API endpoint /plugins/playbooks/api/v0/signal/keywords/ignorCheck if you run itEPSS 0.28%Apr 24, 2025
- Medium6.5Mattermost versions 10.4.x <= 10.4.2, 10.5.x <= 10.5.0, 9.11.x <= 9.11.10 fail to validate the uniqueness and quantity of task actions within the UpdateRunTaskActions GraphQL operaCheck if you run itEPSS 0.40%Apr 24, 2025
- Medium6.5Mattermost versions 10.4.x <= 10.4.2, 10.5.x <= 10.5.0, 9.11.x <= 9.11.10 fail to properly validate the props used by the RetrospectivePost custom post type in the Playbooks pluginCheck if you run itEPSS 0.50%Apr 24, 2025
- Medium6.5ITC Systems Multiplan/Matrix OneCard platform v3.7.4.1002 was discovered to contain a SQL injection vulnerability via the component Forgotpassword.aspx.Check if you run itEPSS 0.32%Apr 24, 2025
- Medium4.3IBM InfoSphere Information 11.7 Server authenticated user to obtain sensitive information when a detailed technical error message is returned in a request.Check if you run itEPSS 0.30%Apr 23, 2025
- Medium5.5In xfig diagramming tool, a segmentation fault while running fig2dev allows an attacker to availability via local input manipulation via read_arcobject function.Check if you run itEPSS 0.25%Apr 23, 2025
- Medium5.5A flaw was found in fig2dev.Check if you run itEPSS 0.25%Apr 23, 2025
- High7.8Bdrive NetDrive Uncontrolled Search Path Element Local Privilege Escalation Vulnerability.Check if you run itEPSS 0.22%Apr 23, 2025
- High7.8Bdrive NetDrive Uncontrolled Search Path Element Local Privilege Escalation Vulnerability.Check if you run itEPSS 0.22%Apr 23, 2025
- High7.8CarlinKit CPC200-CCPA Missing Root of Trust Local Privilege Escalation Vulnerability.Check if you run itEPSS 0.19%Apr 23, 2025
- High7.5Redis is an open source, in-memory database that persists on disk.Check if you run itEPSS 0.87%Apr 23, 2025
Sort