Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'hustCheck if you run itEPSS 0.38%Apr 7, 2026
- High8.5IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0.2 and IBM SCheck if you run itEPSS 0.18%Apr 7, 2026
- Medium6.9An insufficient granularity of access control vulnerability exists in PingIDM (formerly ForgeRock Identity Management) where administrators cannot properly configure a…Check if you run itEPSS 0.22%Apr 7, 2026
- High7.5Emmett is a full-stack Python web framework designed with simplicity.Check if you run itEPSS 0.51%Apr 7, 2026
- Critical9.0SiYuan is a personal knowledge management system.Check if you run itEPSS 0.56%Apr 7, 2026
- High7.6MCP Java SDK is the official Java SDK for Model Context Protocol servers and clients.Check if you run itEPSS 0.16%Apr 7, 2026
- High7.5Aardvark-dns is an authoritative dns server for A/AAAA container records.Check if you run itEPSS 0.40%Apr 7, 2026
- Low3.3Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.Check if you run itEPSS 0.15%Apr 7, 2026
- Medium6.3LibreChat is a ChatGPT clone with additional features.Check if you run itEPSS 0.27%Apr 7, 2026
- Medium6.9Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - Score Extension allows Cross-Site ScriptiCheck if you run itEPSS 0.28%Apr 7, 2026
- Medium6.9Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - CampaignEvents Extension allows Cross-SitCheck if you run itEPSS 0.28%Apr 7, 2026
- High7.5Issue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can send contents of an uninitialized memory buffer to a malicious peer.Check if you run itEPSS 1.05%Apr 7, 2026
- Critical9.8Issue summary: Converting an excessively large OCTET STRING value to a hexadecimal string leads to a heap buffer overflow on 32 bit platforms.Check if you run itEPSS 0.25%Apr 7, 2026
- High7.5Issue summary: During processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo a NULL pointer dereference can happen.Check if you run itEPSS 0.84%Apr 7, 2026
- High7.5Issue summary: During processing of a crafted CMS EnvelopedData message with KeyAgreeRecipientInfo a NULL pointer dereference can happen.Check if you run itEPSS 0.84%Apr 7, 2026
- High7.5Issue summary: When a delta CRL that contains a Delta CRL Indicator extension is processed a NULL pointer dereference might happen if the required CRL Number extension is missing.Check if you run itEPSS 0.92%Apr 7, 2026
- High8.1Issue summary: An uncommon configuration of clients performing DANE TLSA-based server authentication, when paired with uncommon server DANE TLSA records, may result in a use-after-Check if you run itEPSS 0.70%Apr 7, 2026
- Critical9.1Issue summary: Applications using AES-CFB128 encryption or decryption on systems with AVX-512 and VAES support can trigger an out-of-bounds read of up to 15 bytes when processing pCheck if you run itEPSS 0.52%Apr 7, 2026
- Medium6.9Loop with unreachable exit condition ('infinite loop') vulnerability in The Wikimedia Foundation Mediawiki - GrowthExperiments Extension allows Leveraging Time-of-Check and Time-ofCheck if you run itEPSS 0.33%Apr 7, 2026
- Medium6.9Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - GlobalWatchlist Extension allows Cross-SiCheck if you run itEPSS 0.35%Apr 7, 2026
- High8.8Improper removal of sensitive information before storage or transfer vulnerability in The Wikimedia Foundation Mediawiki - CentralAuth Extension allows Resource Leak Exposure.Check if you run itEPSS 0.27%Apr 7, 2026
- High8.7Flatpak is a Linux application sandboxing and distribution framework.Check if you run itEPSS 0.33%Apr 7, 2026
- Critical9.3Flatpak is a Linux application sandboxing and distribution framework.Check if you run itEPSS 1.71%Apr 7, 2026
- Medium5.4The Smart Slider 3 plugin for WordPress is vulnerable to unauthorized access and modification of data due to missing capability checks on multiple wp_ajax_smart-slider3 controllerCheck if you run itEPSS 0.36%Apr 7, 2026
- High8.8Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.Check if you run itEPSS 0.30%Apr 7, 2026
Sort