Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1WordPress appointment-booking-calendar 1.1.24 contains multiple privilege escalation vulnerabilities that allow unauthenticated attackers to modify calendar settings a…Check if you run itEPSS 0.24%Jun 15, 2026
- UnknownMissing AuthorizationPatch nowKEVEPSS 0.26%Jun 15, 2026
- Critical10.0JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type VulnerabilityPatch nowKEVEPSS 89.18%Jun 15, 2026
- Medium6.5Cisco Catalyst SD-WAN Manager Directory or Path Traversal VulnerabilityPatch nowKEVEPSS 29.12%Jun 15, 2026
- High7.5themewinter eventin Missing AuthorizationPatch nowKEVEPSS 0.22%Jun 15, 2026
- High7.2CVE-2026-48165 is listed by MariaDB server is a community developed fork of MySQL server..Check if you run itEPSS 1.51%Jun 12, 2026
- High7.2CVE-2026-48163 is listed by MariaDB server is a community developed fork of MySQL server..Check if you run itEPSS 0.91%Jun 12, 2026
- Medium5.3CVE-2026-44173 is listed by MariaDB server is a community developed fork of MySQL server..Check if you run itEPSS 0.62%Jun 12, 2026
- Medium6.9CVE-2026-44172 is listed by MariaDB server is a community developed fork of MySQL server..Check if you run itEPSS 1.04%Jun 12, 2026
- High7.8CVE-2026-44171 is listed by MariaDB server is a community developed fork of MySQL server..Check if you run itEPSS 0.19%Jun 12, 2026
- Medium6.3CVE-2026-44170 is listed by MariaDB server is a community developed fork of MySQL server..Check if you run itEPSS 1.33%Jun 12, 2026
- Medium4.3CVE-2026-44169 is listed by MariaDB server is a community developed fork of MySQL server..Check if you run itEPSS 0.24%Jun 12, 2026
- High8.0CVE-2026-44168 is listed by MariaDB server is a community developed fork of MySQL server..Check if you run itEPSS 0.59%Jun 12, 2026
- High7.2Moby: Race condition in docker cp allows bind mount redirection to host pathCheck if you run itEPSS 0.10%Jun 12, 2026
- Medium6.1Moby: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swapCheck if you run itEPSS 0.11%Jun 12, 2026
- Medium5.1CVE-2026-53722 is listed by Nuxt is an open-source web development framework for Vue.js..Check if you run itEPSS 0.29%Jun 12, 2026
- Medium6.3CVE-2026-47200 is listed by Nuxt is an open-source web development framework for Vue.js..Check if you run itEPSS 0.23%Jun 12, 2026
- Low2.3CVE-2026-46342 is listed by Nuxt is an open-source web development framework for Vue.js..Check if you run itEPSS 0.09%Jun 12, 2026
- Medium5.3CVE-2026-45669 is listed by Nuxt is an open-source web development framework for Vue.js..Check if you run itEPSS 0.18%Jun 12, 2026
- Critical9.5SimpleHelp Authentication Bypass VulnerabilityPatch nowKEVEPSS 80.25%Jun 12, 2026
- Critical9.8Apache CXF's EndpointReferenceUtils and W3CMultiSchemaFactory classes construct a SAXParserFactory without the necessary JAXP hardening configurations, enabling out-of…Check if you run itEPSS 0.53%Jun 12, 2026
- High7.5request.form() limits silently ignored for application/x-www-form-urlencoded enable DoSCheck if you run itEPSS 0.48%Jun 12, 2026
- High8.7A use-after-free vulnerability exists in MongoDB Server's server-side JavaScript engine when converting BSON documents to JavaScript arrays.Check if you run itEPSS 0.43%Jun 12, 2026
- Medium6.5A stack buffer overflow flaw was found in the GStreamer H.265 codec parser library (gst-plugins-bad).Check if you run itEPSS 0.23%Jun 11, 2026
- Medium6.5An out-of-bounds write vulnerability was found in GStreamer's H.266/VVC PPS picture partition parser in gst-plugins-bad.Check if you run itEPSS 0.21%Jun 11, 2026
Sort