Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5The component accepts XML input through the publisher without disabling external entity resolution.Check if you run itEPSS 0.27%Apr 16, 2026
- High8.8The Career Section plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to Path Traversal and Arbitrary File Deletion in all versions up to, and including, 1.6.Check if you run itEPSS 0.41%Apr 16, 2026
- High7.5The Payment Gateway for Redsys & WooCommerce Lite plugin for WordPress is vulnerable to Improper Verification of Cryptographic Signature in versions up to, and includi…Check if you run itEPSS 0.25%Apr 16, 2026
- Medium5.3The Riaxe Product Customizer plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.1.2.Check if you run itEPSS 0.57%Apr 16, 2026
- Medium4.3In Wago Smart Designer in versions up to 2.33.1 a low privileged remote attacker may enumerate projects and usernames through iterative requests to an specific endpoint.Check if you run itEPSS 0.32%Apr 16, 2026
- High8.1Luanti 5 before 5.15.2 sometimes allows unintended access to an insecure environment.Check if you run itEPSS 0.17%Apr 16, 2026
- High7.5Free5GC is an open-source Linux Foundation project for 5th generation (5G) mobile core networks.Check if you run itEPSS 0.56%Apr 16, 2026
- Medium4.3The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to Missing…Check if you run itEPSS 0.36%Apr 15, 2026
- High8.8OWASP BLT is a QA testing and vulnerability disclosure platform that encompasses websites, apps, git repositories, and more.Check if you run itEPSS 0.60%Apr 15, 2026
- High8.7ApostropheCMS is an open-source Node.js content management system.Check if you run itEPSS 0.44%Apr 15, 2026
- Medium5.3ApostropheCMS is an open-source Node.js content management system.Check if you run itEPSS 0.52%Apr 15, 2026
- Low3.7ApostropheCMS is an open-source Node.js content management system.Check if you run itEPSS 0.32%Apr 15, 2026
- Medium5.5A flaw was found in the System Security Services Daemon (SSSD).Check if you run itEPSS 0.15%Apr 15, 2026
- Medium5.0Weblate is a web based localization tool.Check if you run itEPSS 0.33%Apr 15, 2026
- Medium5.0Weblate is a web based localization tool.Check if you run itEPSS 0.31%Apr 15, 2026
- High7.5An issue in the file handling logic of the component download.php of SAC-NFe v2.0.02 allows attackers to execute a directory traversal and read arbitrary files from th…Check if you run itEPSS 0.99%Apr 15, 2026
- Critical9.9A vulnerability in Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system…Check if you run itEPSS 5.60%Apr 15, 2026
- Critical9.9A vulnerability in Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system…Check if you run itEPSS 6.02%Apr 15, 2026
- Medium5.3A vulnerability in the authentication service feature of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to bypas…Check if you run itEPSS 0.30%Apr 15, 2026
- Medium4.9ZDI-26-582: Cisco Identity Services Engine PatchUpdateListener Directory Traversal Information Disclosure VulnerabilityCheck if you run itEPSS 6.54%Apr 15, 2026
- Critical9.9ZDI-26-581: Cisco Identity Services Engine invokeScript Command Injection Remote Code Execution VulnerabilityCheck this weekEPSS 10.38%Apr 15, 2026
- Medium6.5Multiple vulnerabilities in Cisco Unity Connection could allow an authenticated, remote attacker to download arbitrary files from an affected system.Check if you run itEPSS 0.39%Apr 15, 2026
- Medium6.5Multiple vulnerabilities in Cisco Unity Connection could allow an authenticated, remote attacker to download arbitrary files from an affected system.Check if you run itEPSS 0.39%Apr 15, 2026
- Medium6.5A vulnerability in the web-based management interface of Cisco Unity Connection could allow an authenticated, remote attacker to perform an SQL injection attack agains…Check if you run itEPSS 0.23%Apr 15, 2026
- Medium4.7A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to redirect a user to a malicious web page.Check if you run itEPSS 0.20%Apr 15, 2026