Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.1A flaw has been found in Sanluan PublicCMS 5.202506.d.Check if you run itEPSS 0.23%May 17, 2026
- Medium5.5A vulnerability was detected in Sanluan PublicCMS 5.202506.d.Check if you run itEPSS 0.28%May 17, 2026
- Medium5.5A security vulnerability has been detected in Sanluan PublicCMS 5.202506.d.Check if you run itEPSS 0.33%May 17, 2026
- Medium5.5A weakness has been identified in Sanluan PublicCMS 5.202506.d.Check if you run itEPSS 0.40%May 17, 2026
- Low0.9A security flaw has been discovered in Oinone Pamirs up to 7.2.0.Check if you run itEPSS 0.22%May 17, 2026
- Low2.1A vulnerability was identified in Oinone Pamirs up to 7.2.0.Check if you run itEPSS 0.24%May 17, 2026
- Medium5.5A vulnerability was determined in Oinone Pamirs up to 7.2.0.Check if you run itEPSS 0.26%May 17, 2026
- Low2.1A vulnerability was found in Investintech SlimPDFReader up to 2.0.13.Check if you run itEPSS 0.26%May 17, 2026
- Low2.1A vulnerability has been found in Open5GS up to 2.7.7.Check if you run itEPSS 0.38%May 17, 2026
- Low2.1A flaw has been found in Open5GS up to 2.7.6.Check if you run itEPSS 0.38%May 17, 2026
- Low2.1A vulnerability was detected in Open5GS up to 2.7.7.Check if you run itEPSS 0.39%May 17, 2026
- Low2.1A security vulnerability has been detected in Open5GS up to 2.7.7.Check if you run itEPSS 0.39%May 17, 2026
- High8.8The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Privilege Escalation in version 3.4.9.Check if you run itEPSS 0.36%May 17, 2026
- Medium5.5A weakness has been identified in CoreWorxLab CAAL up to 1.6.0.Check if you run itEPSS 0.31%May 17, 2026
- Low2.0A security flaw has been discovered in Dataease 2.10.20.Check if you run itEPSS 0.39%May 17, 2026
- Medium6.3### Summary throws when called with and on an array containing or .Check if you run itEPSS 0.40%May 17, 2026
- UnknownUNKNOWN READ in bfd_getb32Open the advisoryMay 17, 2026
- High8.8Das U-Boot before 2026.04 allows FIT (Flat Image Tree) signature verification bypass because hashed-nodes is omitted from a hash.Check if you run itEPSS 0.21%May 16, 2026
- Medium5.1Quick.CMS 6.7 contains a cross-site scripting vulnerability in the sliders form that allows authenticated attackers to inject malicious scripts by submitting XSS paylo…Check if you run itEPSS 0.18%May 16, 2026
- High7.1Fuel CMS 1.4.13 contains a blind SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the 'col'…Check if you run itEPSS 0.23%May 16, 2026
- High8.7WordPress Plugin Backup and Restore 1.0.3 contains an arbitrary file deletion vulnerability that allows authenticated attackers to delete files by manipulating paramet…Check if you run itEPSS 0.40%May 16, 2026
- Medium6.9ProcessMaker 3.5.4 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting improper path traversal validation.Check if you run itEPSS 0.78%May 16, 2026
- High8.7WordPress Plugin Anti-Malware Security and Bruteforce Firewall 4.20.59 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbit…Check if you run itEPSS 0.65%May 16, 2026
- High8.7TextPattern CMS 4.9.0-dev contains a remote code execution vulnerability that allows authenticated attackers to upload arbitrary PHP files by exploiting the plugin upl…Check if you run itEPSS 0.32%May 16, 2026
- Medium5.1WP Learn Manager 1.1.2 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts through the parameter.Check if you run itEPSS 0.21%May 16, 2026
Sort