· Vulnerability feed · live
CVE feed
Aggregated from NVD and the CISA Known Exploited Vulnerabilities catalog, updated every 30 minutes. Scores use CVSS v3.1 where published.
9.9Wavlink WN553X1-B — command injection.9.9Wavlink WN553X1-B — command injection.9.9Wavlink WN553X1-B — command injection.9.3Liquid Web / StellarWP BookIt — SQL injection.10.0PrefectHQ prefab-ui — code injection.9.9Wavlink WN553X1-B — command injection.9.9Wavlink WN701AE — command injection.9.1Wavlink WN553X1-B — command injection.9.9Wavlink WN553X1-B — command injection.9.9beam-cloud Beta9 worker — privilege escalation.9.9beam-cloud Beta9 worker — path traversal.9.9beam-cloud Beta9 gateway — path traversal.9.9Wavlink WN701AE — command injection.9.9Oray Pugongying X5 Pro — improper authorization.9.1Oray Pugongying X5 Pro — path traversal.10.0Wavlink WL-WN530BE1-A — command injection.9.9Wavlink WL-WN530HG4B — command injection.10.0Wavlink WL-WN579A3-A — command injection.9.9Wavlink WN579X3-D — command injection.10.0D-Link DIR-505 — buffer overflow.9.8Apache MINA — unsafe deserialization.9.8anji-plus AJ-Report — remote code execution.9.8dromara Jpom — authentication bypass.9.8wpazleen SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications — remote code execution.EPSS 0.7%9.1Acadlix LMS – AI Quiz Maker, Online Exam & Course Plugin for WordPress plugin for WordPress — arbitrary file deletion.EPSS 0.8%