151104+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FolioVision FV Descriptions fv-descriptions allows Reflected XSS.This issue affects FV Descriptions: from n/a …
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Carver Lab 10CentMail 10centmail-subscription-management-and-analytics allows Reflected XSS.This issue affects 10CentMail: from n/a through …
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dreamwinner Easy Language Switcher easy-language-switcher allows Reflected XSS.This issue affects Easy Language Switcher: …
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in lemonadestudio Lemonade Social Networks Autoposter Pinterest lemonade-sna-pinterest-edition allows Reflected XSS.This issue affects Lemonade …
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bizswoop Leads CRM leads-crm allows Reflected XSS.This issue affects Leads CRM: from n/a …
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gavinr Inline Footnotes inline-footnotes allows Stored XSS.This issue affects Inline Footnotes: from n/a …
A vulnerability, which was classified as critical, has been found in D-Link DIR-816 A2 1.10CNB05_R1B011D88210. This issue affects some unknown processing of the file /goform/form2AddVrtsrv.cgi …
A vulnerability classified as critical was found in D-Link DIR-816 A2 1.10CNB05_R1B011D88210. This vulnerability affects unknown code of the file /goform/DDNS of the component DDNS …
An unintended entry point vulnerability has been identified in certain router models, which may allow for arbitrary command execution. Refer to the ' 01/02/2025 ASUS …
A vulnerability, which was classified as critical, has been found in code-projects Job Recruitment 1.0. This issue affects some unknown processing of the file /_parse/_call_main_search_ajax.php …
A vulnerability classified as critical was found in code-projects Job Recruitment 1.0. This vulnerability affects unknown code of the file /_parse/_call_job/search_ajax.php of the component Job …
An improper input insertion vulnerability in AiCloud on certain router models may lead to arbitrary command execution. Refer to the '01/02/2025 ASUS Router AiCloud vulnerability' …
The AHAthat Plugin WordPress plugin through 1.6 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected …
The goodlayers-core WordPress plugin before 2.0.10 does not sanitise and escape some of its settings, which could allow users with the contributor role and above …
The wp-enable-svg WordPress plugin through 0.7 does not sanitize SVG files when uploaded, allowing for authors and above to upload SVGs containing malicious scripts
The Net::EasyTCP package 0.15 through 0.26 for Perl uses Perl's builtin rand() if no strong randomization module is present.
The Net::EasyTCP package before 0.15 for Perl always uses Perl's builtin rand(), which is not a strong random number generator, for cryptographic keys.
Landray EIS 2001 through 2006 allows Message/fi_message_receiver.aspx?replyid= SQL injection.
Huang Yaoshi Pharmaceutical Management Software through 16.0 allows arbitrary file upload via a .asp filename in the fileName element of the UploadFile element in a …
A vulnerability classified as critical has been found in code-projects Job Recruitment 1.0. This affects an unknown part of the file /_parse/_feedback_system.php. The manipulation of …
The does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used …
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ibnuyahya Category Post Shortcode category-post-shortcode allows Stored XSS.This issue affects Category Post Shortcode: …
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in svegliadesign SvegliaT Buttons svegliat-buttons allows Stored XSS.This issue affects SvegliaT Buttons: from n/a …
Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
Rejected reason: To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.
Free website and port scanning — find vulnerabilities before attackers do.