Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1CGA-rp85-386m-xxprOpen the advisoryMay 19, 2026
- High7.2CGA-m36w-cxhq-9xj9Open the advisoryMay 19, 2026
- High7.5The Contest Gallery plugin for WordPress is vulnerable to SQL Injection via the 'form_input' parameter in versions up to, and including, 28.1.6.Check if you run itEPSS 0.39%May 19, 2026
- Critical9.8Piotnet piotnet_forms Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 3.06%May 19, 2026
- Low1.6A possible information disclosure vulnerability exists in the Vaadin Maven plugin and Vaadin Gradle plugin that exposes the full set of environment variables in build…Check if you run itEPSS 0.12%May 19, 2026
- High7.1A flaw was found in Keycloak.Check if you run itEPSS 0.41%May 19, 2026
- High7.5A session fixation vulnerability was found in Keycloak's login-actions endpoints.Check if you run itEPSS 0.84%May 19, 2026
- High8.1A flaw was found in Keycloak's URL validation logic during redirect operations.Check if you run itEPSS 0.64%May 19, 2026
- High7.5A flaw was found in Keycloak.Check if you run itEPSS 0.88%May 19, 2026
- Medium6.8A flaw was found in Keycloak.Check if you run itEPSS 0.30%May 19, 2026
- Medium4.3Missing Authorization vulnerability in Brainstorm Force Presto Player allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.24%May 19, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - Fix handling of MAY_BACKLOG requests MAY_BACKLOG requests can return EBUSY.Check if you run itEPSS 0.68%May 19, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl() Yiming reports an integer underfl…Check if you run itEPSS 0.16%May 19, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: qrtr: ns: Limit the maximum server registration per node Current code does no bound checking o…Check if you run itEPSS 0.15%May 19, 2026
- Medium6.8A flaw was found in Keycloak.Check if you run itEPSS 0.44%May 19, 2026
- Medium4.3A flaw was found in Keycloak.Check if you run itEPSS 0.37%May 19, 2026
- Medium6.5A flaw was found in Keycloak.Check if you run itEPSS 0.37%May 19, 2026
- Medium4.9A flaw was found in Keycloak.Check if you run itEPSS 0.43%May 19, 2026
- High8.2The AddressRepository::getSqlQuery() method constructs a database query without properly sanitizing user input, leading to SQL Injection.Check if you run itEPSS 0.33%May 19, 2026
- High7.1The Crawler extension passes the X-T3Crawler-Meta response header from crawled URLs directly to PHP's unserialize().Check if you run itEPSS 0.39%May 19, 2026
- High8.2The extension fails to properly sanitize user input before using it in a database query.Check if you run itEPSS 0.44%May 19, 2026
- Critical9.2The extension passes an attacker-controlled cookie directly to PHP's unserialize() without safely processing the input.Check if you run itEPSS 2.63%May 19, 2026
- Medium5.9The file indexer does not normalize the configured directory path.Check if you run itEPSS 0.40%May 19, 2026
- Medium5.9The additional_tables configuration of the page and tt_content indexers accepts arbitrary table and field names.Check if you run itEPSS 0.32%May 19, 2026
- Medium5.9The OOXML parsing of the file indexer does not disable external entity resolution.Check if you run itEPSS 0.30%May 19, 2026
Sort