Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3The Zoho Flow plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.14.1.Check this weekEPSS 19.00%Sep 11, 2025
- Medium6.3It is possible to bypass the clipping level of authentication attempts in SolaX Cloud through the use of the 'Forgot Password' functionality as an oracle.Check this weekEPSS 39.00%Sep 10, 2025
- Medium4.3The Maspik – Ultimate Spam Protection plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.5.6.Check this weekEPSS 17.00%Sep 10, 2025
- Medium4.3The WP Blast | SEO & Performance Booster plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.8.6.Check this weekEPSS 17.00%Sep 10, 2025
- Medium5.3Improper action enforcement in certain Zoom Workplace Clients for Windows may allow an unauthenticated user to conduct a disclosure of information via network access.Check this weekEPSS 26.00%Sep 9, 2025
- Medium4.3Incorrect authorization in certain Zoom Workplace Clients for Windows may allow an authenticated user to conduct an impact to integrity via network access.Check this weekEPSS 21.00%Sep 9, 2025
- Medium4.3Cross-site scripting in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access.Check this weekEPSS 31.00%Sep 9, 2025
- Medium4.3Uncontrolled resource consumption in certain Zoom Workplace Clients may allow an unauthenticated user to conduct a denial of service via network access.Check this weekEPSS 27.00%Sep 9, 2025
- Medium6.5Buffer overflow in certain Zoom Workplace Clients may allow an authenticated user to conduct a denial of service via network access.Check this weekEPSS 32.00%Sep 9, 2025
- Medium4.8Use after free in Windows SMBv3 Client allows an authorized attacker to execute code over a network.Check if you run itEPSS 3.12%Sep 9, 2025
- Low3.1A flaw was found in libssh's handling of key exchange (KEX) processes when a client repeatedly sends incorrect KEX guesses.Check this weekEPSS 43.00%Sep 9, 2025
- Medium6.1Due to a Cross-Site Scripting (XSS) vulnerability in the SAP NetWeaver ABAP Platform, an unauthenticated attacker could generate a malicious link and make it publicly accessible.Check this weekEPSS 23.00%Sep 9, 2025
- High8.8The LB-Link BL-CPE300M AX300 4G LTE Router firmware version BL-R8800_B10_ALK_SL_V01.01.02P42U14_06 does not implement proper session handling.Check this weekEPSS 43.00%Sep 9, 2025
- High8.2The Cloud SAML SSO plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'set_organization_settings' action of the csso_hCheck this weekEPSS 29.00%Sep 6, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls Both the ACE and CSI driver are missCheck this weekEPSS 15.00%Sep 5, 2025
- High7.8net/sched: Fix backlog accounting in qdisc_dequeue_internalCheck if you run itEPSS 0.15%Sep 5, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix vm_bind_ioctl double free bug If the argument check during an array bind fails, the bind_ops are freCheck this weekEPSS 16.00%Sep 5, 2025
- Medium4.7An attacker with authenticated and privileged access could modify the contents of a non-sensitive file by traversing the path in the limited shell of the CLI.Check this weekEPSS 29.00%Sep 5, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() Lei Lu recently reported that nfsd4_setcCheck if you run itEPSS 0.39%Sep 4, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: pNFS: Fix uninited ptr deref in block/scsi layout The error occurs on the third attempt to encode extents.Check this weekEPSS 18.00%Sep 4, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: i2c: core: Fix double-free of fwnode in i2c_unregister_device() Before commit df6d7277e552 ("i2c: core: Do not dCheck this weekEPSS 16.00%Sep 4, 2025
- Medium5.3The PopAd plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.4.Check this weekEPSS 16.00%Sep 4, 2025
- Critical9.75ire is a cross-platform desktop artificial intelligence assistant and model context protocol client.Check this weekEPSS 64.00%Sep 4, 2025
- Low2.3CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture.Check this weekEPSS 42.00%Sep 3, 2025
- Medium6.9Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients.Check this weekEPSS 63.00%Sep 3, 2025