Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1Improper input validation in Microsoft Dynamics allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 1.39%Apr 30, 2025
- Medium6.5vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs.Check if you run itEPSS 0.52%Apr 30, 2025
- High7.7An unauthenticated attacker on the WAN interface, with the ability to intercept Dynamic DNS (DDNS) traffic between DDNS services and the modem, could manipulate specific responsesCheck this weekEPSS 21.00%Apr 25, 2025
- Low2.4Andamiro Pump It Up 20th Anniversary (aka Double X or XX/2019) 1.00.0-2.08.3 allows a physically proximate attacker to cause a denial of service (application crash) via certain desCheck this weekEPSS 21.00%Apr 25, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Benjamin Buddle Send From send-from allows Stored XSS.This issue affects SendCheck if you run itEPSS 0.27%Apr 24, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in Shamim Hasan Custom Functions Plugin custom-functions allows Stored XSS.This issue affects Custom Functions Plugin: from n/a throCheck if you run itEPSS 0.14%Apr 24, 2025
- High8.0ManageWiki is a MediaWiki extension allowing users to manage wikis.Check if you run itEPSS 0.67%Apr 21, 2025
- Medium4.3An issue was discovered in GoBGP before 3.35.0.Check if you run itEPSS 0.42%Apr 21, 2025
- Medium6.5Rasa Pro is a framework for building scalable, dynamic conversational AI assistants that integrate large language models (LLMs).Check if you run itEPSS 0.46%Apr 18, 2025
- High7.1A Remote Code Execution (RCE) vulnerability was identified in GitHub Enterprise Server that allowed attackers to execute arbitrary code by exploiting the pre-receive hook functionaCheck if you run itEPSS 1.29%Apr 17, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Excellent Dynamics Make Email Customizer for WooCommerce make-email-customizerCheck if you run itEPSS 0.29%Apr 17, 2025
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in algol.plus Advanced Dynamic Pricing for WooCommerce advanced-dynamic-pricing-for-woocommerce allows Cross Site Request Forgery.ThCheck if you run itEPSS 0.17%Apr 17, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Nawawi Jamili Docket Cache docket-cache allows PHP Local FiCheck if you run itEPSS 0.70%Apr 17, 2025
- Medium4.9The WP Editor plugin for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 1.2.9.1.Check if you run itEPSS 0.53%Apr 17, 2025
- High7.2The WP Editor plugin for WordPress is vulnerable to arbitrary file update due to missing file path validation in all versions up to, and including, 1.2.9.1.Check if you run itEPSS 1.02%Apr 17, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets When calling netlbl_conn_setattr(), addr-Check this weekEPSS 30.00%Apr 16, 2025
- High7.1In the Linux kernel, the following vulnerability has been resolved: acpi: nfit: fix narrowing conversion in acpi_nfit_ctl Syzkaller has reported a warning in to_nfit_bus_uuid(): "oCheck this weekEPSS 22.00%Apr 16, 2025
- Medium5.4Missing Authorization vulnerability in Service2Client LLC Dynamic Post dynamic-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DynamCheck if you run itEPSS 0.45%Apr 16, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Apply the link chain quirk on NEC isoc endpoints Two clearly different specimens of NEC uPD720200 (onCheck this weekEPSS 20.00%Apr 16, 2025
- Medium5.4A Stored XSS vulnerability exists in the message compose feature of Chamilo LMS 1.11.28.Check this weekEPSS 35.00%Apr 16, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in caalami Advanced Custom Fields: Link Picker Field acf-link-picker-field allowsCheck this weekEPSS 29.00%Apr 15, 2025
- High8.7Insecure Direct Object Reference vulnerability in Deporsite from T-INNOVA allows an attacker to retrieve sensitive information from others users via "idUsuario" parameter in "/helpCheck if you run itEPSS 0.47%Apr 15, 2025
- High8.7Insecure Direct Object Reference vulnerability in Deporsite from T-INNOVA allows an attacker to retrieve sensitive information from others users via "idUsuario" parameter in "/helpCheck if you run itEPSS 0.47%Apr 15, 2025
- Unknowneset internet_security Uncontrolled Search Path ElementPatch nowKEVEPSS 2.06%Apr 7, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drop_monitor: fix incorrect initialization order Syzkaller reports the following bug: BUG: spinlock…Check if you run itEPSS 0.25%Mar 12, 2025