Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.8Improper verification of intent by broadcast receiver in Settings prior to SMR Mar-2026 Release 1 allows local attacker to launch arbitrary activity with Settings privilege.Check if you run itEPSS 0.08%Mar 16, 2026
- Medium4.3The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the de…Check if you run itEPSS 0.22%Mar 16, 2026
- High7.5The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 9.1.9…Check if you run itEPSS 0.28%Mar 16, 2026
- Medium4.3The Wicked Folders – Folder Organizer for Pages, Posts, and Custom Post Types plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up…Check if you run itEPSS 0.24%Mar 16, 2026
- Medium5.3The Thim Kit for Elementor – Pre-built Templates & Widgets for Elementor plugin for WordPress is vulnerable to unauthorized access of data due to a missing validation…Check if you run itEPSS 0.27%Mar 16, 2026
- High7.1IBM CICS Transaction Gateway for Multiplatforms 9.3 and 10.1 could allow a user to transfer or view files due to improper access controls.Check if you run itEPSS 0.22%Mar 16, 2026
- Medium6.8Malformed ATAES132A responses with an oversized length field overflow a 52-byte stack buffer in the Zephyr crypto driver, allowing a compromised device or bus attacker…Check if you run itEPSS 0.25%Mar 16, 2026
- Medium5.5in OpenHarmony v6.0 and prior versions allow a local attacker case DOS through missing release of memory.Check if you run itEPSS 0.16%Mar 16, 2026
- Medium5.0Microsoft Edge (Chromium-based) for Android Spoofing VulnerabilityCheck if you run itEPSS 0.25%Mar 16, 2026
- Medium5.3Mumble before 1.6.870 is prone to an out-of-bounds array access, which may result in denial of service (client crash).Check if you run itEPSS 0.29%Mar 16, 2026
- Medium5.5in OpenHarmony v5.1.0 and prior versions allow a local attacker cause DOS through improper input.Check if you run itEPSS 0.15%Mar 16, 2026
- Medium6.9Raytha CMS does not have any brute force protection mechanism implemented.Check if you run itEPSS 0.39%Mar 16, 2026
- Medium5.1Raytha CMS is vulnerable to Reflected XSS via returnUrl parameter in logon functionality.Check if you run itEPSS 0.28%Mar 16, 2026
- Medium6.9Raytha CMS is vulnerable to User Enumeration in password reset functionality.Check if you run itEPSS 0.29%Mar 16, 2026
- Medium5.1Raytha CMS is vulnerable to reflected XSS via the backToListUrl parameter.Check if you run itEPSS 0.24%Mar 16, 2026
- Medium5.3Raytha CMS is vulnerable to Stored XSS via FirstName and LastName parameters in profile editing functionality.Check if you run itEPSS 0.25%Mar 16, 2026
- High7.5Raytha CMS allows an attacker to spoof or headers to attacker controlled domain.Check if you run itEPSS 0.15%Mar 16, 2026
- Medium5.1Raytha CMS is vulnerable to Server-Side Request Forgery in the “Themes - Import from URL” feature.Check if you run itEPSS 0.25%Mar 16, 2026
- Medium6.9Raytha CMS is vulnerable to Cross-Site Request Forgery across multiple endpoints.Check if you run itEPSS 0.12%Mar 16, 2026
- Medium5.1Raytha CMS is vulnerable to Stored XSS via FieldValues[0].Value parameter in page creation functionality.Check if you run itEPSS 0.18%Mar 16, 2026
- Medium5.1Raytha CMS is vulnerable to Stored XSS via FieldValues[1].Value parameter in post editing functionality.Check if you run itEPSS 0.22%Mar 16, 2026
- High8.8This issue affects Apache Spark: before 3.5.7 and 4.0.1.Check if you run itEPSS 5.42%Mar 16, 2026
- Critical9.8HCL AION is affected by a vulnerability where offering images are not digitally signed.Check if you run itEPSS 0.12%Mar 16, 2026
- High7.2HCL AION is affected by a vulnerability where generated containers may execute binaries with root-level privileges.Check if you run itEPSS 0.13%Mar 16, 2026
- High7.3HCL AION is affected by a vulnerability where certain offering configurations may permit execution of potentially harmful SQL queries.Check if you run itEPSS 0.23%Mar 16, 2026
Sort