Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5RustFS is a distributed object storage system built in Rust.Check if you run itEPSS 0.34%Jan 7, 2026
- High8.8RustFS is a distributed object storage system built in Rust.Check if you run itEPSS 7.26%Jan 7, 2026
- Medium4.6OpenLDAP Lightning Memory-Mapped Database (LMDB) versions up to and including 0.9.14, prior to commit 8e1fda8, contain a heap buffer underflow in the readline() function of mdb_loaCheck if you run itEPSS 0.15%Jan 7, 2026
- Medium6.1Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki - ProofreadPage Extension a…Check if you run itEPSS 0.19%Jan 7, 2026
- High7.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Wikimedia Foundation MediaWiki - CSS extension allows Path Traversal.Th…Check if you run itEPSS 0.44%Jan 7, 2026
- Medium5.3Inefficient Regular Expression Complexity vulnerability in Wikimedia Foundation MediaWiki - VisualData Extension allows Regular Expression Exponential Blowup.This issu…Check if you run itEPSS 0.48%Jan 7, 2026
- High7.1Insufficient Session Expiration vulnerability in ABB WebPro SNMP Card PowerValue, ABB WebPro SNMP Card PowerValue UL.This issue affects WebPro SNMP Card PowerValue: th…Check if you run itEPSS 0.21%Jan 7, 2026
- Medium4.9Cisco Identity Services Engine Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 6.08%Jan 7, 2026
- Medium5.3Multiple Cisco products are affected by a vulnerability in the processing of DCE/RPC requests that could allow an unauthenticated, remote attacker to cause the Snort 3…Check if you run itEPSS 0.60%Jan 7, 2026
- Medium5.8Multiple Cisco products are affected by a vulnerability in the processing of DCE/RPC requests that could allow an unauthenticated, remote attacker to cause the Snort 3…Check if you run itEPSS 0.67%Jan 7, 2026
- Medium6.1Cross-site Scripting vulnerability in Devolutions PowerShell Universal.This issue affects Powershell Universal: before 4.5.6, before 5.6.13.Check if you run itEPSS 0.18%Jan 7, 2026
- High8.4Incorrect Implementation of Authentication Algorithm vulnerability in ABB WebPro SNMP Card PowerValue, ABB WebPro SNMP Card PowerValue UL.This issue affects WebPro SNM…Check if you run itEPSS 0.27%Jan 7, 2026
- High7.1Improper Check for Unusual or Exceptional Conditions vulnerability in ABB WebPro SNMP Card PowerValue, ABB WebPro SNMP Card PowerValue UL.This issue affects WebPro SNM…Check if you run itEPSS 0.20%Jan 7, 2026
- Critical9.6A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and other Java applications.Check if you run itEPSS 1.33%Jan 7, 2026
- Critical9.3OpenFlagr versions prior to and including 1.1.18 contain an authentication bypass vulnerability in the HTTP middleware.Check if you run itEPSS 1.52%Jan 7, 2026
- High8.8Insufficient policy enforcement in WebView tag in Google Chrome prior to 143.0.7499.192 allowed an attacker who convinced a user to install a malicious extension to inject scriptsCheck this weekEPSS 20.95%Jan 6, 2026
- Medium6.9A flaw has been found in projectworlds House Rental and Property Listing 1.0.Check if you run itEPSS 0.42%Jan 6, 2026
- Medium4.8A vulnerability was detected in projectworlds House Rental and Property Listing 1.0.Check if you run itEPSS 0.25%Jan 6, 2026
- Critical9.9Unrestricted Upload of File with Dangerous Type vulnerability in Themify Themify Sidepane WordPress Theme, Themify Themify Newsy, Themify Themify Folo, Themify Themify Edmin, ThemiCheck if you run itEPSS 0.51%Jan 6, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AA-Team Woocommerce Sales Funnel Builder, AA-Team Amazon Affiliates Addon forCheck if you run itEPSS 0.18%Jan 6, 2026
- High8.8Incorrect Privilege Assignment vulnerability in AA-Team Premium Age Verification / Restriction for WordPress, AA-Team Responsive Coming Soon Landing Page / Holding Page for WordPreCheck if you run itEPSS 0.30%Jan 6, 2026
- Medium5.3A security vulnerability has been detected in TOTOLINK WA300 5.2cu.7112_B20190227.Check if you run itEPSS 2.65%Jan 6, 2026
- Medium4.3Missing Authorization vulnerability in Tickera Tickera tickera-event-ticketing-system allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TicCheck if you run itEPSS 0.18%Jan 6, 2026
- Medium4.3Missing Authorization vulnerability in Proxy & VPN Blocker Proxy & VPN Blocker proxy-vpn-blocker allows Exploiting Incorrectly Configured Access Control Security Levels.This issueCheck if you run itEPSS 0.18%Jan 6, 2026
- High7.4A weakness has been identified in Tenda AC23 16.03.07.52.Check if you run itEPSS 3.48%Jan 6, 2026
Sort