Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Crypt::Argon2 versions from 0.017 before 0.031 for Perl perform a heap out-of-bounds read in argon2_verify on empty encoded input.Check if you run itEPSS 0.51%May 13, 2026
- Medium4.3The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.9.8.4.Check if you run itEPSS 0.39%May 13, 2026
- Critical9.0Thymeleaf is a server-side Java template engine for web and standalone environments.Check if you run itEPSS 0.54%May 12, 2026
- Medium6.5The The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 0.9.2.3.Check if you run itEPSS 0.38%May 12, 2026
- Medium4.3A tampering vulnerability exists when .NET Core improperly handles specially crafted files.Check if you run itEPSS 0.64%May 12, 2026
- High7.3YAML::Syck versions before 1.38 for Perl has an out-of-bounds read.Check if you run itEPSS 0.42%May 12, 2026
- Medium6.5LWP::UserAgent versions before 6.83 for Perl leak Authorization and Proxy-Authorization headers on cross-origin redirects.Check if you run itEPSS 0.41%May 12, 2026
- High7.1CWE-22: Improper Limitation of a Pathname to a Restricted Directory (“Path Traversal”) vulnerability that could cause unauthorized access to sensitive files when user-…Check if you run itEPSS 0.44%May 12, 2026
- Critical9.3A vulnerability has been identified in ROS# (All versions < V2.2.2).Check if you run itEPSS 0.64%May 12, 2026
- High8.5A vulnerability has been identified in Teamcenter V2312 (All versions < V2312.0014), Teamcenter V2406 (All versions < V2406.0012), Teamcenter V2412 (All versions < V24…Check if you run itEPSS 0.28%May 12, 2026
- High7.0Affected devices do not properly restrict access to the web browser via the Control Panel when no corresponding security mechanisms are in place.Check if you run itEPSS 0.17%May 12, 2026
- High7.2Affected devices do not properly validate and sanitize filenames on the Firmware Update page.Check if you run itEPSS 0.47%May 12, 2026
- Critical9.3Affected devices do not properly validate and sanitize Technology Object (TO) name rendered on the "Motion Control Diagnostics" page of the web interface.Check if you run itEPSS 0.54%May 12, 2026
- Critical9.3Affected devices do not properly validate and sanitize PLC/station name rendered on the "communication" parameters page of the web interface.Check if you run itEPSS 0.54%May 12, 2026
- High8.8A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0).Check if you run itEPSS 0.30%May 12, 2026
- High8.9A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versio…Check if you run itEPSS 0.67%May 12, 2026
- Medium6.1A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versio…Check if you run itEPSS 0.40%May 12, 2026
- High7.7A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versio…Check if you run itEPSS 0.54%May 12, 2026
- Medium4.3The Forms Rb plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.9.Check if you run itEPSS 0.49%May 12, 2026
- Medium6.4The BJ Lazy Load plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the function in all versions up to, and including, 1.0.9.Check if you run itEPSS 0.19%May 12, 2026
- High7.1The Salesforce module before 1.x-1.0.1 for Backdrop CMS does not properly use a random state parameter to protect the authorization flow against CSRF attacks.Check if you run itEPSS 0.15%May 12, 2026
- Medium6.5HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP request lines or control field header values.Check if you run itEPSS 0.36%May 11, 2026
- Medium5.3Amazon::Credentials versions through 1.2.0 for Perl uses rand to generate encryption keys.Check if you run itEPSS 0.26%May 11, 2026
- High7.3Alien::FreeImage versions through 1.001 for Perl contains several vulnerable libraries.Check if you run itEPSS 0.29%May 11, 2026
- Medium6.3OpenClaw before 2026.4.20 fails to properly preserve untrusted labels for isolated cron awareness events, allowing webhook-triggered cron agent output to be recorded a…Check if you run itEPSS 0.22%May 11, 2026