Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.0A vulnerability in the CLI of Cisco UCS Manager Software could allow an authenticated, local attacker with administrative privileges to read or create a file or overwrite any fileCheck this weekEPSS 18.00%Aug 27, 2025
- Medium6.5Multiple vulnerabilities in the CLI and web-based management interface of Cisco UCS Manager Software could allow an authenticated, remote attacker with administrative privileges toCheck if you run itEPSS 1.25%Aug 27, 2025
- Medium6.4The Lazy Load for Videos plugin for WordPress is vulnerable to Stored Cross-Site Scripting via its lazy‑loading handlers in all versions up to, and including, 2.18.7 due to insuffiCheck this weekEPSS 24.00%Aug 27, 2025
- Medium4.7The WordPress Automatic Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.118.0.Check this weekEPSS 19.00%Aug 26, 2025
- Medium4.3The Sertifier Certificate & Badge Maker for WordPress – Tutor LMS plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.19.Check this weekEPSS 11.00%Aug 23, 2025
- Medium4.3The Silencesoft RSS Reader plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.6.Check this weekEPSS 13.00%Aug 23, 2025
- Medium4.3The Restore Permanently delete Post or Page Data plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.Check this weekEPSS 13.00%Aug 23, 2025
- Unknownhongdian h8922 Direct Request ('Forced Browsing')Patch nowKEVEPSS 2.79%Aug 23, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: i2c: qup: jump out of the loop in case of timeout Original logic only sets the return value but doesn't jump outCheck this weekEPSS 16.00%Aug 22, 2025
- None0.0In the Linux kernel, the following vulnerability has been resolved: pinmux: fix race causing mux_owner NULL with active mux_usecount commit 5a3e85c3c397 ("pinmux: Use sequential acCheck this weekEPSS 12.00%Aug 22, 2025
- Critical9.3UFO: Alien Invasion versions up to and including 2.2.1 contain a buffer overflow vulnerability in its built-in IRC client component.Check if you run itEPSS 1.24%Aug 22, 2025
- Critical9.3Xftp FTP Client version up to and including 3.0 (build 0238) contain a stack-based buffer overflow vulnerability triggered by a maliciously crafted PWD response from an FTP server.Check if you run itEPSS 1.47%Aug 21, 2025
- High8.5Seagull FTP Client <= v3.3 Build 409 contains a stack-based buffer overflow vulnerability in its FTP directory listing parser.Check if you run itEPSS 0.58%Aug 21, 2025
- High8.5Gekko Manager FTP Client <= 0.77 contains a stack-based buffer overflow in its FTP directory listing parser.Check if you run itEPSS 0.58%Aug 21, 2025
- High8.4FTPPad <= 1.2.0 contains a stack-based buffer overflow vulnerability in its FTP directory listing parser.Check if you run itEPSS 0.58%Aug 21, 2025
- High8.1The Inspiro theme for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.2.Check this weekEPSS 22.00%Aug 21, 2025
- High8.7Odin Secure FTP <= 4.1 is vulnerable to a stack-based buffer overflow when parsing directory listings received in response to an FTP LIST command.Check if you run itEPSS 1.48%Aug 20, 2025
- Critical9.3LeapFTP < 3.1.x contains a stack-based buffer overflow vulnerability in its FTP client parser.Check if you run itEPSS 1.19%Aug 20, 2025
- High8.7Kaillera Server version 0.86 is vulnerable to a denial-of-service condition triggered by sending a malformed UDP packet after the initial handshake.Check if you run itEPSS 1.31%Aug 20, 2025
- High8.5FileWrangler <= 5.30 suffers from a stack-based buffer overflow vulnerability when parsing directory listings from an FTP server.Check if you run itEPSS 0.41%Aug 20, 2025
- Medium5.4The Easy Digital Downloads plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.5.0.Check this weekEPSS 17.00%Aug 20, 2025
- Critical9.8Deserialization of Untrusted Data vulnerability in QuanticaLabs MediCenter - Health Medical Clinic medicenter allows Object Injection.This issue affects MediCenter - Health MedicalCheck this weekEPSS 40.00%Aug 20, 2025
- Medium6.5Malicious scripts utilizing repetitive JavaScript alerts could prevent client user interaction in some scenarios and allow for denial of service attacks.Check this weekEPSS 22.00%Aug 19, 2025
- Medium5.4The URL scheme used by Firefox to facilitate searching of text queries could incorrectly allow attackers to open arbitrary website URLs or internal pages if a user was tricked intoCheck this weekEPSS 23.00%Aug 19, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix double destruction of rsv_qp rsv_qp may be double destroyed in error flow, first in free_mr_init()Check this weekEPSS 18.00%Aug 19, 2025