Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1A reflected cross-site scripting (XSS) vulnerability in the Fireware OS Web UI enabled execution of malicious JavaScript in the context of an authenticated management…Check if you run itEPSS 0.24%Mar 3, 2026
- High8.6An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an authenticated privileged administrator to execute arbitrary code with root permissions via…Check if you run itEPSS 6.43%Mar 3, 2026
- Low2.1Improper authorization in the API endpoint GET /1.0/certificates in Canonical LXD 6.6 on Linux allows an authenticated, restricted user to enumerate all certificate fi…Check if you run itEPSS 0.15%Mar 3, 2026
- Low1.9A weakness has been identified in xlnt-community xlnt up to 1.6.1.Check if you run itEPSS 0.22%Mar 3, 2026
- Medium5.3Hostname verification bypass issue in Apache Ranger NiFiRegistryClient is reported in Apache Ranger versions <= 2.7.0.Check if you run itEPSS 0.51%Mar 3, 2026
- Critical9.8Remote Code Execution Vulnerability in NashornScriptEngineCreator is reported in Apache Ranger versions <= 2.7.0.Check if you run itEPSS 1.38%Mar 3, 2026
- High7.2The WP Zendesk for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via form submission…Check if you run itEPSS 0.27%Mar 3, 2026
- Critical9.8OpenMQ exposes a TCP-based management service (imqbrokerd) that by default requires authentication.Check if you run itEPSS 0.46%Mar 3, 2026
- Low2.9A vulnerability was found in Dataease SQLBot up to 1.5.1.Check if you run itEPSS 0.21%Mar 3, 2026
- High8.7Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP all versions allows a…Check if you run itEPSS 0.48%Mar 3, 2026
- High8.7Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-EIP EtherNet/IP Module FX5-EIP versions 1.000 and prior a…Check if you run itEPSS 0.48%Mar 3, 2026
- High8.7Always-Incorrect Control Flow Implementation vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENET/IP versions 1.106…Check if you run itEPSS 0.48%Mar 3, 2026
- Medium5.7Privilege escalation via dll hijacking in Inno Setup 6.2.1 and ealier versions.Check if you run itEPSS 0.11%Mar 3, 2026
- High7.4A security vulnerability has been detected in LLM-Claw 0.1.0/0.1.1/0.1.1a/0.1.1a-p1.Check if you run itEPSS 0.68%Mar 3, 2026
- Low2.0Versions of the package mailparser before 3.9.3 are vulnerable to Cross-site Scripting (XSS) via the textToHtml() function due to the improper sanitisation of URLs in…Check if you run itEPSS 0.36%Mar 3, 2026
- Low1.9Versions of the package @tootallnate/once before 3.0.1 are vulnerable to Incorrect Control Flow Scoping in promise resolving when AbortSignal option is used.Check if you run itEPSS 0.13%Mar 3, 2026
- Medium5.6Cleartext Transmission of Sensitive Information (CWE-319) in a component used in the Gallagher Hanwha VMS and Gallagher NxWitness VMS integrations allows unprivileged…Check if you run itEPSS 0.12%Mar 3, 2026
- Low2.5Improper Locking vulnerability (CWE-667) in Gallagher Morpho integration allows a privileged operator to cause a limited denial-of-service in the Command Centre Server.Check if you run itEPSS 0.08%Mar 3, 2026
- Medium5.7Cleartext Storage of Sensitive Information (CWE-312) in the Command Centre Mobile Client on Android and iOS could allow an attacker with access to a logged-in Operator…Check if you run itEPSS 0.08%Mar 3, 2026
- Critical9.8The All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.2.5.Check if you run itEPSS 0.97%Mar 3, 2026
- High8.8The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.33.5 via the locate_template() function.Check if you run itEPSS 1.04%Mar 3, 2026
- High7.2The Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin plugin for WordPress is vulnerable to Server-Side Request Forgery in all versi…Check if you run itEPSS 0.74%Mar 3, 2026
- Medium6.5The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to SQL Injection via the JSON Import in all versions up to, and…Check if you run itEPSS 0.37%Mar 3, 2026
- High8.2An embedded test key and certificate could be extracted from a Poly Voice device using specialized reverse engineering tools.Check if you run itEPSS 0.10%Mar 3, 2026
- High8.8The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to privilege escalation via password reset in all versions up to…Check if you run itEPSS 0.34%Mar 3, 2026
Sort