Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.9Netty is an asynchronous event-driven network application framework for development of maintainable high performance protocol servers and clients.Check this weekEPSS 71.00%Sep 3, 2025
- Medium4.3Improper Restriction of Rendered UI Layers or Frames vulnerability in Akinsoft LimonDesk allows iFrame Overlay, CAPEC - 103 - Clickjacking.Check if you run itEPSS 0.18%Sep 3, 2025
- Medium4.6One Identity by Quest Safeguard for Privileged Passwords Appliance 7.5.1.20903 is vulnerable to One Time Password (OTP)/Multifactor Authentication (MFA) bypass using response manipCheck if you run itEPSS 1.38%Sep 3, 2025
- Medium5.3LinkedIn Mobile Application for Android version 4.1.1087.2 fails to update link preview metadata (image, title, description) when a user replaces the original URL in a post or commCheck this weekEPSS 33.00%Sep 3, 2025
- High7.5A flaw was found in Undertow where malformed client requests can trigger server-side stream resets without triggering abuse counters.Check if you run itEPSS 2.33%Sep 2, 2025
- High8.1ESPHome is a system to control microcontrollers remotely through Home Automation systems.Open the advisorySep 2, 2025
- Medium5.1A vulnerability was detected in RemoteClinic 2.0.Open the advisorySep 2, 2025
- Medium5.5A vulnerability was found in RemoteClinic up to 2.0.Open the advisorySep 1, 2025
- Low2.1A vulnerability has been found in RemoteClinic up to 2.0.Open the advisorySep 1, 2025
- Low2.1A flaw has been found in RemoteClinic up to 2.0.Open the advisorySep 1, 2025
- Medium5.5A vulnerability was detected in RemoteClinic up to 2.0.Open the advisorySep 1, 2025
- Critical10.0BS.Player version 2.57 (build 1051) contains a vulnerability in its playlist import functionality.Check if you run itEPSS 1.07%Aug 30, 2025
- Medium4.3The Related Posts Lite plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.12.Check this weekEPSS 13.00%Aug 30, 2025
- Medium6.3Eventlet is a concurrent networking library for Python.Open the advisoryAug 29, 2025
- Medium5.3nptd-rs is a tool for synchronizing your computer's clock, implementing the NTP and NTS protocols.Open the advisoryAug 29, 2025
- Medium6.5Gitpod is a developer platform for cloud development environments.Open the advisoryAug 29, 2025
- Medium4.3The Ultimate Tag Warrior Importer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.2.Check this weekEPSS 13.00%Aug 29, 2025
- High8.7Clinic Image System developed by Changing has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents.Open the advisoryAug 29, 2025
- Critical9.3Clinic Image System developed by Changing contains hard-coded Credentials, allowing unauthenticated remote attackers to log into the system using administrator credent…Open the advisoryAug 29, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in dactum Clickbank WordPress Plugin (Niche Storefront) clickbank-niche-storefronts allows Stored XSS.This issue affects Clickbank WCheck this weekEPSS 13.00%Aug 28, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in OffClicks Invisible Optin invisible-optin allows Stored XSS.This issue affects Invisible Optin: from n/a through <= 1.0.Check this weekEPSS 12.00%Aug 28, 2025
- High7.3Incorrect permission assignment for critical resource issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier), which may allow users who can…Open the advisoryAug 28, 2025
- Medium6.1The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘'fl_builder' parameter in all versions up to, and includinCheck this weekEPSS 22.00%Aug 28, 2025
- High8.8The Video Share VOD – Turnkey Video Site Builder Script plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.7.6.Check this weekEPSS 25.00%Aug 28, 2025
- Medium4.8A reflected cross-site scripting (XSS) vulnerability exists in the web interface of the Arcserve Unified Data Protection (UDP), where unsanitized user input is improperly reflectedCheck if you run itEPSS 0.22%Aug 27, 2025