Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3).Check if you run itEPSS 0.46%Apr 14, 2026
- Medium6.9A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3 with UMC).Check if you run itEPSS 0.26%Apr 14, 2026
- Medium6.3A vulnerability has been identified in Siemens Software Center (All versions < V3.5.8.2), Simcenter 3D (All versions < V2506.6000), Simcenter Femap (All versions < V2506.0002), SimCheck if you run itEPSS 0.14%Apr 14, 2026
- Critical9.1Header injection vulnerability in Apache APISIX.Check if you run itEPSS 0.53%Apr 14, 2026
- Medium4.3The Eventin – Events Calendar, Event Booking, Ticket & Registration (AI Powered) plugin for WordPress is vulnerable to unauthorized access of data due to a improper capability checCheck if you run itEPSS 0.18%Apr 14, 2026
- Medium6.5The The Germanized for WooCommerce plugin for WordPress is vulnerable to arbitrary shortcode execution via 'account_holder' parameter in all versions up to, and including, 3.20.5.Check if you run itEPSS 0.43%Apr 14, 2026
- High7.2The Smart Post Show – Post Grid, Post Carousel & Slider, and List Category Posts plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.Check if you run itEPSS 0.53%Apr 14, 2026
- Critical9.1PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.31%Apr 14, 2026
- Critical9.1PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.43%Apr 14, 2026
- Critical9.8PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.62%Apr 14, 2026
- Medium4.4The WholeSale Products Dynamic Pricing Management WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and includCheck if you run itEPSS 0.16%Apr 14, 2026
- Medium6.4The ShopLentor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the woolentor_quickview_button shortcode's button_text attribute in all versions up to, and incCheck if you run itEPSS 0.30%Apr 14, 2026
- Medium6.4The Surbma | Booking.com Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode in all versions up to, and including, 2.1 due to insCheck if you run itEPSS 0.16%Apr 14, 2026
- High7.1External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets.Check if you run itEPSS 0.27%Apr 14, 2026
- High8.4PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.25%Apr 14, 2026
- High7.2PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.30%Apr 14, 2026
- High7.2The Form Maker by 10Web plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Matrix field (Text Box input type) in form submissions in all versions up to, andCheck if you run itEPSS 0.25%Apr 14, 2026
- High7.2The BackWPup plugin for WordPress is vulnerable to Local File Inclusion via the parameter of the REST endpoint in all versions up to, and including, 5.6.6 due to a non-recursive saCheck if you run itEPSS 1.33%Apr 14, 2026
- Medium5.1MaxKB is an open-source AI assistant for enterprise.Check if you run itEPSS 0.18%Apr 14, 2026
- Medium4.3Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Check if you run itEPSS 0.30%Apr 14, 2026
- Critical9.8A critical vulnerability in the Talend JobServer and Talend Runtime allows unauthenticated remote code execution via the JMX monitoring port.Check if you run itEPSS 0.75%Apr 14, 2026
- Medium5.1MaxKB is an open-source AI assistant for enterprise.Check if you run itEPSS 0.20%Apr 14, 2026
- High7.5The JetEngine plugin for WordPress is vulnerable to SQL Injection via the Custom Content Type (CCT) REST API search endpoint in all versions up to, and including, 3.8.6.1.Check if you run itEPSS 0.37%Apr 14, 2026
- Critical9.1The LearnPress plugin for WordPress is vulnerable to unauthorized data deletion due to a missing capability check on the function in all versions up to, and including, 4.3.2.8.Check if you run itEPSS 0.88%Apr 14, 2026
- Medium6.9MaxKB is an open-source AI assistant for enterprise.Check if you run itEPSS 0.18%Apr 14, 2026
Sort