Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Trog::TOTP versions before 1.006 for Perl generate secrets using rand.Check if you run itEPSS 0.49%May 15, 2026
- Medium6.5Imager versions through 1.030 for Perl allow a heap out of bounds (OOB) write on crafted multi-frame GIF files.Check if you run itEPSS 0.36%May 15, 2026
- Medium6.5Apache::Session::Generate::SHA256 versions before 1.3.19 for Perl create insecure session ids.Check if you run itEPSS 0.39%May 15, 2026
- Medium5.3Imager::File::GIF versions through 1.002 for Perl allow a heap out of bounds (OOB) write on crafted multi-frame GIF files.Check if you run itEPSS 0.19%May 15, 2026
- Medium4.3The Classified Listing – AI-Powered Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized access in all versions up to, and inc…Check if you run itEPSS 0.45%May 15, 2026
- High7.1Improperly preserved integrity of hardware configuration state during a power save/restore operation in the AMD Secure Processor (ASP) could allow an attacker with the…Check if you run itEPSS 0.10%May 15, 2026
- Medium5.3WWW::Mechanize::Cached versions before 2.00 for Perl deserialize cached HTTP responses from a world-writable on-disk cache, enabling local response forgery and code execution.Check if you run itEPSS 0.31%May 15, 2026
- High7.5ZITADEL is an open source identity management platform.Check if you run itEPSS 0.62%May 14, 2026
- Medium6.9Fleet is open source device management software.Check if you run itEPSS 0.39%May 14, 2026
- Medium6.0Fleet is open source device management software.Check if you run itEPSS 0.94%May 14, 2026
- Low2.3HCL AION is affected by a vulnerability where certain security-related HTTP response headers are not properly configured.Check if you run itEPSS 0.11%May 14, 2026
- Critical9.8Gotenberg is a Docker-powered stateless API for PDF files.Patch nowKEVEPSS 3.67%May 14, 2026
- Low2.3OpenBao is an open source identity-based secrets management system.Check if you run itEPSS 0.43%May 14, 2026
- High8.1The Database Backup for WordPress plugin for WordPress is vulnerable to unauthorized arbitrary file read and deletion in all versions up to, and including, 2.5.2.Check if you run itEPSS 0.57%May 14, 2026
- High7.5The Database Backup for WordPress plugin for WordPress is vulnerable to unauthorized database export in all versions up to, and including, 2.5.2.Check if you run itEPSS 0.50%May 14, 2026
- High8.8Authorization bypass through User-Controlled key vulnerability in APPYAP Technology and Information Inc.Check if you run itEPSS 0.24%May 14, 2026
- Critical9.1The InfusedWoo Pro plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.1.2.Check if you run itEPSS 0.46%May 14, 2026
- Medium4.3The My Calendar – Accessible Event Manager plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.7.9.Check if you run itEPSS 0.47%May 14, 2026
- Critical10.0Cisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityPatch nowKEVEPSS 91.82%May 14, 2026
- Critical9.8Web::Passwd versions through 0.03 for Perl is vulnerable to RCE.Check if you run itEPSS 2.49%May 13, 2026
- Medium6.9The Angular SSR is a server-rise rendering tool for Angular applications.Check if you run itEPSS 0.30%May 13, 2026
- High7.3A code injection vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to its AppleScript interface allowing a locally authent…Check if you run itEPSS 0.16%May 13, 2026
- High7.3An improper protection of alternate path vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to an internal automation bridge.Check if you run itEPSS 0.15%May 13, 2026
- Critical9.2NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module.Patch nowKEVEPSS 3.40%May 13, 2026
- High7.2U-SPEED AC1200 Gigabit Wi-Fi Router (Model: T18-21K) V1.0 is vulnerable to Command Injection.Check if you run itEPSS 2.61%May 13, 2026