Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.5Ocean Extra <= 2.6.0 - Unauthenticated Arbitrary Shortcode Execution via 'oceanwp_library' Shortcode TemplateOct 15, 2026
- High8.5Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code.Oct 14, 2026
- Medium6.5WeGIA is a web manager for charitable institutions.Oct 14, 2026
- Critical9.1Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files.Oct 14, 2026
- High7.5Improper Control of Generation of Code ('Code Injection') vulnerability in VillaTheme Salevo woo-boost-sales allows Code Injection.This issue affects Salevo: from n/a…Oct 14, 2026
- Medium5.3WordPress MDTF plugin <= 1.3.9 - Arbitrary Code Execution vulnerabilityOct 14, 2026
- Critical9.9Hestia Control Panel is a lightweight and powerful control panel for the modern web.Oct 14, 2026
- UnknownGitea resolves local reusable workflow files from a fork's head commit when a trusted base-branch workflow runs for a pull_request_target event.Oct 14, 2026
- High7.2The affiliate-toolkit WordPress plugin before 3.9.1 does not prevent a low-privileged user from supplying a template body that its bundled templating engine compiles a…EPSS 0.2%Oct 14, 2026
- High8.6Palo Alto Networks PAN-OS Code Injection VulnerabilityKEVOct 14, 2026
- High8.6TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability.EPSS 0.6%Oct 13, 2026
- High8.6TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability.EPSS 0.6%Oct 13, 2026
- Critical9.1The Click to Chat for WhatsApp plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to, and including, 4.44 This is due to the greetings_…EPSS 0.5%Oct 13, 2026
- High8.8Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.EPSS 0.9%Oct 13, 2026
- High8.8dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas.EPSS 0.3%Oct 13, 2026
- High8.8dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas.EPSS 0.3%Oct 13, 2026
- Critical9.8An issue in SKYWORTH DIGITAL CO.,LTD SK-WR6640X Wi-Fi 6 Dual-Band Fiber Router (AX1800M) V1.0.3 allows a remote attacker to execute arbitrary code.EPSS 0.2%Oct 13, 2026
- Critical10.0ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of th…EPSS 1.1%Oct 13, 2026
- Critical9.1ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of th…EPSS 0.7%Oct 13, 2026
- Critical9.9ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of th…EPSS 0.5%Oct 13, 2026
- Critical9.9SAP S/4HANA (Manage Substitution/Validation Rules) does not sufficiently validate input processed by rule definition functionality that utilizes a domain-specific scri…EPSS 0.4%Oct 13, 2026
- Low2.4A security vulnerability has been detected in repository RAE up to a4d18c4db766419cbe7cb8c02cd9f7ceb0ec9041.EPSS 0.1%Oct 13, 2026
- Critical9.9IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information or execute arbitrary code on the system due to improper data s…EPSS 0.5%Oct 13, 2026
- High8.8IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements us…EPSS 0.4%Oct 12, 2026
- Low1.9A security vulnerability has been detected in Edimax BR-6208AC 1.32.EPSS 0.2%Oct 12, 2026
159 records · page 1 of 7
PreviousNext