Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownKubernetes C# Client: improper certificate validation in custom CA mode may lead to man-in-the-middle attacksCheck if you run itEPSS 0.31%Sep 15, 2025
- Medium5.4A Clickjacking vulnerability exists in Rems' Employee Management System 1.0.Check this weekEPSS 35.00%Sep 15, 2025
- Critical9.8An issue was discovered in the methods push.lite.avtech.com.AvtechLib.GetHttpsResponse and push.lite.avtech.com.Push_HttpService.getNewHttpClient in AVTECH EagleEyes 2.0.0.Check this weekEPSS 66.00%Sep 15, 2025
- High7.7In One Identity OneLogin before 2025.3.0, a request returns the OIDC client secret with GET Apps API v2 (even though this secret should only be returned when an App is first createCheck this weekEPSS 32.00%Sep 14, 2025
- Medium6.1The Ultimate Blogroll plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.5.2.Check this weekEPSS 15.00%Sep 12, 2025
- Medium6.1The Side Slide Responsive Menu plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.Check this weekEPSS 16.00%Sep 12, 2025
- High7.5Axios is a promise based HTTP client for the browser and Node.js.Check if you run itEPSS 1.14%Sep 12, 2025
- High8.7IBM Fusion 2.2.0 through 2.10.1, IBM Fusion HCI 2.2.0 through 2.10.0, and IBM Fusion HCI for watsonx 2.8.2 through 2.10.0 uses insecure default configurations that could expose AMQCheck this weekEPSS 37.00%Sep 11, 2025
- High7.5A potential vulnerability was reported in the Lenovo Wallpaper Client that could allow arbitrary code execution under certain conditions.Check this weekEPSS 19.00%Sep 11, 2025
- Low2.7matrix-sdk-base is the base component to build a Matrix client library.Check this weekEPSS 40.00%Sep 11, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: soc: qcom: mdt_loader: Ensure we don't read past the ELF header When the MDT loader is used in remoteproc, the ECheck this weekEPSS 17.00%Sep 11, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: iommu/arm-smmu-qcom: Add SM6115 MDSS compatible Add the SM6115 MDSS compatible to clients compatible list, as itCheck this weekEPSS 16.00%Sep 11, 2025
- Medium4.3The LH Signing plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.83.Check this weekEPSS 17.00%Sep 11, 2025
- Medium4.3The PhpList Subber plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.Check this weekEPSS 16.00%Sep 11, 2025
- Medium5.3The Publish approval plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.Check this weekEPSS 15.00%Sep 11, 2025
- Medium6.1The Seo Monster plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.3.3.Check this weekEPSS 15.00%Sep 11, 2025
- Medium4.3The Admin in English with Switch plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.Check this weekEPSS 16.00%Sep 11, 2025
- Medium4.3The Blog Designer For Elementor – Post Slider, Post Carousel, Post Grid plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.1.7.Check this weekEPSS 13.00%Sep 11, 2025
- Medium4.3The Run Log plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7.10.Check this weekEPSS 16.00%Sep 11, 2025
- Medium4.3The Analytics Reduce Bounce Rate plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.3.Check this weekEPSS 16.00%Sep 11, 2025
- Medium4.3The Plugin updates blocker plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.2.Check this weekEPSS 13.00%Sep 11, 2025
- High7.5The Propovoice: All-in-One Client Management System plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.7.6.7 via the send_email() funCheck this weekEPSS 63.00%Sep 11, 2025
- Medium4.3The The integration of the AMO.CRM plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1.Check this weekEPSS 16.00%Sep 11, 2025
- Medium4.3The AutoCatSet plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.4.Check this weekEPSS 16.00%Sep 11, 2025
- Medium4.3The Zoho Flow plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.14.1.Check this weekEPSS 19.00%Sep 11, 2025