Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Soflyy WP Dynamic Links wp-dynamic-links allows Reflected XSS.This issue affecCheck this weekEPSS 24.00%Aug 14, 2025
- High8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shabti Kaplan Frontend Admin by DynamiApps acf-frontend-form-element allows BlCheck this weekEPSS 28.00%Aug 14, 2025
- Critical10.0Spreecommerce versions prior to 0.60.2 contains a remote command execution vulnerability in its search functionality.Check if you run itEPSS 5.81%Aug 13, 2025
- High7.8Heap-based buffer overflow in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally.Check this weekEPSS 76.00%Aug 12, 2025
- Medium5.3Missing Authorization vulnerability in Damian Góra FiboSearch ajax-search-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affectsCheck this weekEPSS 24.00%Aug 12, 2025
- UnknownMicrosoft Windows Untrusted Pointer DereferencePatch nowKEVEPSS 1.98%Aug 1, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: smc: Fix various oops due to inet_sock type confusion.Check this weekEPSS 16.00%Jul 28, 2025
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request If the request being processed is not a v4Check if you run itEPSS 0.56%Jul 25, 2025
- Medium6.4The Station Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘width' and 'height’ parameter in all versions up to, and including, 2.4.2 due to insufficCheck this weekEPSS 43.00%Jul 24, 2025
- Medium6.1The Latest Post Accordian Slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.Check this weekEPSS 12.00%Jul 22, 2025
- UnknownTOTOLINK n600r_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 2.54%Jul 21, 2025
- UnknownCitrix virtual_apps_and_desktops Improper Control of Dynamically-Managed Code ResourcesPatch nowKEVEPSS 46.61%Jul 18, 2025
- UnknownMissing AuthorizationPatch nowKEVEPSS 0.32%Jul 16, 2025
- Medium5.3A vulnerability has been found in PHPGurukul Online Fire Reporting System 1.2 and classified as critical.Check this weekEPSS 40.00%Jul 14, 2025
- Medium5.3A vulnerability, which was classified as critical, was found in PHPGurukul Online Fire Reporting System 1.2.Check this weekEPSS 40.00%Jul 14, 2025
- Medium5.3A vulnerability classified as critical was found in PHPGurukul Online Fire Reporting System 1.2.Check this weekEPSS 40.00%Jul 14, 2025
- Medium5.3A vulnerability classified as critical has been found in PHPGurukul Online Fire Reporting System 1.2.Check this weekEPSS 40.00%Jul 14, 2025
- High8.8In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Prevent sending WMI commands to firmware during firmware crash Currently, we encounter the followiCheck if you run itEPSS 0.22%Jul 10, 2025
- Low2.0WeGIA is a web manager for charitable institutions.Check this weekEPSS 27.00%Jul 7, 2025
- High8.7A vulnerability was found in Belkin F9K1122 1.00.33.Check if you run itEPSS 7.68%Jul 6, 2025
- Medium6.8Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Shabti Kaplan Frontend Admin by DynamiApps acf-frontend-form-element allows Path TraCheck this weekEPSS 48.00%Jul 4, 2025
- High7.5Bolt CMS versions 3.7.0 and earlier contain a chain of vulnerabilities that together allow an authenticated user to achieve remote code execution.Check if you run itEPSS 4.22%Jul 3, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: arm64/fpsimd: Avoid clobbering kernel FPSIMD state with SMSTOP On system with SME, a thread's kernel FPSIMD statCheck if you run itEPSS 0.17%Jul 3, 2025
- Unknownlive555 streaming_media Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.85%Jul 1, 2025
- High7.5IBM Informix Dynamic Server 12.10,14.10, and15.0 could allow a remote attacker to cause a denial of service due to an integer underflow when processing packets.Check this weekEPSS 44.00%Jun 28, 2025