113799+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.
The Photo Gallery by Ays plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.4.8. This is due …
The SurveyJS: Drag & Drop WordPress Form Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.12.20. …
The WP Social Ninja – Embed Social Feeds, Customer Reviews, Chat Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up …
The Visualizer: Tables and Charts Manager for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'query' parameter in all versions up to, …
The donation WordPress plugin through 1.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing high privilege users, such …
The db-access WordPress plugin through 0.8.7 does not have authorization in an AJAX action, allowing any authenticated users, such as subscriber to perform SQLI attacks
The Export All Posts, Products, Orders, Refunds & Users plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, …
The Kadence WooCommerce Email Designer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the customer name in all versions up to, and including, …
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has …
In Modem, there is a possible system crash due to incorrect error handling. This could lead to remote denial of service, if a UE has …
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has …
In GPU pdma, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with no additional …
In GPU pdma, there is a possible memory corruption due to a missing permission check. This could lead to local denial of service with no …
In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if …
In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if …
In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor …
In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if …
In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor …
In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor …
In display, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege if a malicious …
In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor …
In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if …
In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if …
In display, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege if a …
In display, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege if a malicious actor …
In aee daemon, there is a possible system crash due to a race condition. This could lead to local denial of service if a malicious …
In smi, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if …
In mmdvfs, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if …
In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if …
In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has …
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has …
In Modem, there is a possible system crash due to a logic error. This could lead to remote denial of service, if a UE has …
In Modem, there is a possible application crash due to improper input validation. This could lead to remote denial of service, if a UE has …
In Modem, there is a possible system crash due to an incorrect bounds check. This could lead to remote denial of service, if a UE …
In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote denial of service, if a UE has …
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE …
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE …
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has …
The BlockArt Blocks – Gutenberg Blocks, Page Builder Blocks ,WordPress Block Plugin, Sections & Template Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting …
The Cost Calculator Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deleteOrdersFiles() function in all …
IBM Informix Dynamic Server 14.10 could allow a local user on the system to log into the Informix server as administrator without a password.
Improper verification of source of a communication channel in SmartTouchCall prior to version 1.0.1.1 allows remote attackers to access sensitive information. User interaction is required …
Improper authorization in Samsung Account prior to version 15.5.01.1 allows local attacker to launch arbitrary activity with Samsung Account privilege.
Improper input validation in Samsung Account prior to version 15.5.01.1 allows local attacker to execute arbitrary script.
Improper input validation in Samsung Internet prior to version 29.0.0.48 allows local attackers to inject arbitrary script.
Incorrect default permissions in Samsung Cloud Assistant prior to version 8.0.03.8 allows local attacker to access partial data in sandbox.
Improper export of android application components in Galaxy Store for Galaxy Watch prior to version 1.0.06.29 allows local attacker to install arbitrary application on Galaxy …
Improper access control in MPLocalService of MotionPhoto prior to version 4.1.51 allows local attackers to start privileged service.
Improper access control in MPRemoteService of MotionPhoto prior to version 4.1.51 allows local attackers to start privileged service.
Heap-based buffer overflow in libimagecodec.quram.so prior to SMR Dec-2025 Release 1 allows remote attackers to access out-of-bounds memory.
Free website and port scanning — find vulnerabilities before attackers do.