Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.9SEPPmail Secure Email Gateway before version 15.0.3 allows attackers with a specially crafted email address to read the contents of emails encrypted for other users.Check if you run itEPSS 0.23%Apr 2, 2026
- High7.8Code execution in AssistFeedbackService of TECNO Pova7 Pro 5G on Android allows local apps to execute arbitrary code as system via command injection.Check if you run itEPSS 0.53%Apr 2, 2026
- Medium5.3An unauthenticated remote attacker can access a configuration file containing database credentials.Check if you run itEPSS 0.27%Apr 2, 2026
- Medium5.5A vulnerability has been found in Cesanta Mongoose up to 7.20.Check if you run itEPSS 0.76%Apr 2, 2026
- Medium6.4The Webmention plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.6.2 via the 'Tools::read' function.Check if you run itEPSS 0.21%Apr 2, 2026
- High7.5The W3 Total Cache plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 2.9.3.Check if you run itEPSS 3.21%Apr 2, 2026
- High7.2The Webmention plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.6.2 in the 'MF2::parse_authorpage' function via the 'ReceivCheck if you run itEPSS 0.31%Apr 2, 2026
- Low2.0A vulnerability was determined in SourceCodester Simple Customer Relationship Management System 1.0.Check if you run itEPSS 0.20%Apr 2, 2026
- Medium5.5A vulnerability has been found in AlejandroArciniegas mcp-data-vis bc597e391f184d2187062fd567599a3cb72adf51/de5a51525a69822290eaee569a1ab447b490746d.Check if you run itEPSS 0.26%Apr 2, 2026
- High7.2The Spam Protect for Contact Form 7 WordPress plugin before 1.2.10 allows logging to a PHP file, which could allow an attacker with editor access to achieve Remote Cod…Check if you run itEPSS 0.66%Apr 2, 2026
- Medium4.8A vulnerability was found in priyankark a11y-mcp up to 1.0.5.Check if you run itEPSS 0.13%Apr 2, 2026
- High8.1The MW WP Form plugin for WordPress is vulnerable to arbitrary file moving due to insufficient file path validation via the 'generate_user_filepath' function and the 'move_temp_filCheck if you run itEPSS 1.29%Apr 2, 2026
- Medium5.5A vulnerability was detected in vanna-ai vanna up to 2.0.2.Check if you run itEPSS 0.42%Apr 2, 2026
- Medium5.3A flaw has been found in vanna-ai vanna up to 2.0.2.Check if you run itEPSS 0.17%Apr 2, 2026
- Low2.1A security vulnerability has been detected in itsourcecode Payroll Management System up to 1.0.Check if you run itEPSS 0.34%Apr 2, 2026
- Medium5.3A weakness has been identified in LibRaw up to 0.22.0.Check if you run itEPSS 0.64%Apr 2, 2026
- Low2.1A security flaw has been discovered in Nothings stb up to 1.22.Check if you run itEPSS 0.43%Apr 2, 2026
- Medium5.4IBM Content Navigator 3.0.15, 3.1.0, and 3.2.0 is vulnerable to cross-site scripting.Check if you run itEPSS 0.21%Apr 2, 2026
- Low2.1A vulnerability was determined in Nothings stb up to 1.26.Check if you run itEPSS 0.52%Apr 2, 2026
- Medium5.3A vulnerability was identified in Nothings stb up to 1.22.Check if you run itEPSS 0.45%Apr 2, 2026
- Critical9.8An issue was discovered in Mbed TLS versions from 2.19.0 up to 3.6.5, Mbed TLS 4.0.0.Check if you run itEPSS 0.44%Apr 2, 2026
- High7.5An issue was discovered in Mbed TLS 3.x before 3.6.6.Check if you run itEPSS 0.41%Apr 2, 2026
- Medium6.8An issue in the firmware update mechanism of Qianniao QN-L23PA0904 v20250721.1640 allows attackers to gain root access, install backdoors, and exfiltrate data via supplying a craftCheck if you run itEPSS 0.12%Apr 2, 2026
- High7.5A Time-of-Check to Time-of-Use (TOCTOU) race condition vulnerability in Balena Etcher for Windows prior to v2.1.4 allows attackers to escalate privileges and execute arbitrary codeCheck if you run itEPSS 0.18%Apr 2, 2026
- Medium6.1Multiple reflected cross-site scripting (XSS) vulnerabilities in the login.php endpoint of Interzen Consulting S.r.l ZenShare Suite v17.0 allows attackers to execute arbitrary JavaCheck if you run itEPSS 0.21%Apr 2, 2026
Sort