160723+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.
Rejected reason: Reserved in error; never associated with a vulnerability.
Rejected reason: Reserved in error; never associated with a vulnerability.
Rejected reason: Reserved in error; never associated with a vulnerability.
Rejected reason: Reserved in error; never associated with a vulnerability.
Rejected reason: Reserved in error; never associated with a vulnerability.
Rejected reason: Reserved in error; never associated with a vulnerability.
Rejected reason: Reserved in error; never associated with a vulnerability.
Rejected reason: Reserved in error; never associated with a vulnerability.
Rejected reason: Reserved in error; never associated with a vulnerability.
Rejected reason: Reserved in error; never associated with a vulnerability.
Rejected reason: Reserved in error; never associated with a vulnerability.
Rejected reason: Reserved in error; never associated with a vulnerability.
Rejected reason: Reserved in error; never associated with a vulnerability.
Rejected reason: Reserved in error; never associated with a vulnerability.
Rejected reason: Reserved in error; never associated with a vulnerability.
Rejected reason: Reserved in error; never associated with a vulnerability.
Rejected reason: Reserved in error; never associated with a vulnerability.
Rejected reason: Reserved in error; never associated with a vulnerability.
Rejected reason: Reserved in error; never associated with a vulnerability.
Rejected reason: Reserved in error; never associated with a vulnerability.
Rejected reason: Reserved in error; never associated with a vulnerability.
Rejected reason: Reserved in error; never associated with a vulnerability.
Rejected reason: Reserved in error; never associated with a vulnerability.
Rejected reason: Reserved in error; never associated with a vulnerability.
Rejected reason: Reserved in error; never associated with a vulnerability.
Rejected reason: Reserved in error; never associated with a vulnerability.
Rejected reason: Reserved in error; never associated with a vulnerability.
The Smart Popup by Supsystic WordPress plugin before 2.0.2 does not prevent template-injection payloads from being stored in a popup text block and later evaluated …
XML External Entity (XXE) injection vulnerability in the SAFT import feature of the NoviGest Desktop App. The application processes user-controlled XML files using a JAXB …
Vulnerability due to a lack of authentication in critical functions of the NoviGest Desktop App's Java RMI service. An attacker with network access to the …
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions …
Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 …
The Essential Addons for Elementor WordPress plugin before 6.8.7 does not apply its administrator approval requirement to accounts registered through its email one-time-password flow, which …
The Royal Elementor Addons WordPress plugin before 1.7.1070 does not validate submitted form field values before substituting them into the recipient addresses of its form …
Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 …
Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 …
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions …
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions …
The Sadad QA Payment WordPress plugin through 1.28 does not correctly verify the authenticity of incoming payment notifications, as the verification is keyed on a …
The BitPay Gateway for WooCommerce WordPress plugin through 4.1.3 does not bind the payment provider's transaction confirmation to the order it completes, nor verify the …
When pretix is used as the identity provider in a Single-Sign-On (SSO) setup for customer accounts, the system did not properly validate the `response_type` requested …
Some of our API endpoints allowed to create order payments referencing a gift card by using the auto-incremented internal ID. This ID was not checked …
The mechanism binding files generated during a shredding process to the authentication method is not working correctly and the same session token is used for …
Local privilege escalation due to improper authentication. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 42569, Acronis Cyber Protect 17 …
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions …
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions …
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions …
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions …
Dell PowerProtect Data Domain Management Center, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 …
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions …
Free website and port scanning — find vulnerabilities before attackers do.
Block known exploits with a web application firewall while you patch, keep your own devices clean, or test the fix on a fresh server.
Sucuri →
Website firewall, malware cleanup & monitoring
NordPass →
Password manager with breach alerts
Malwarebytes →
Anti-malware for Windows, Mac and phones, 25% off
Contabo →
Cheap VPS & dedicated servers, EU/US/Asia
Affiliate links: we may earn a commission, your price stays the same.