Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1A stored Cross-Site Scripting (XSS) vulnerability has been found in Seafile v12.0.10.Check if you run itEPSS 0.20%Dec 4, 2025
- Medium5.5A flaw was found in ansible-collection-community-general.Check if you run itEPSS 0.19%Dec 4, 2025
- Medium4.8The Custom Post Type UI plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.18.0.Check if you run itEPSS 0.30%Dec 4, 2025
- Medium4.3The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.9.4.Check if you run itEPSS 0.26%Dec 4, 2025
- Medium6.1The Clik stats plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the parameter in all versions up to, and including, 0.8 due to insufficient input sanitizatiCheck if you run itEPSS 0.25%Dec 4, 2025
- High7.2The Omnichannel for WooCommerce: Google, Amazon, eBay & Walmart Integration – Powered by Codisto plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the sync() fuCheck if you run itEPSS 0.29%Dec 4, 2025
- Medium5.3The WebP Express plugin for WordPress is vulnerable to information exposure via config files in all versions up to, and including, 0.25.9.Check if you run itEPSS 0.31%Dec 4, 2025
- Medium6.1Alinto Sogo 5.12.3 is vulnerable to Cross Site Scripting (XSS) via the theme parameter.Check if you run itEPSS 0.30%Dec 4, 2025
- Medium6.4Cross-site scripting (XSS) vulnerability in a reachable files_pdfviewer example directory in Nextcloud with versions before 22.2.10.33, 23.0.12.29, 24.0.12.28, 25.0.13.23, 26.0.13.Check if you run itEPSS 0.30%Dec 4, 2025
- High7.1LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files.Check if you run itEPSS 0.35%Dec 3, 2025
- Critical9.9Cal.com is open-source scheduling software.Check if you run itEPSS 0.96%Dec 3, 2025
- Medium5.0Step CA is an online certificate authority for secure, automated certificate management for DevOps.Check if you run itEPSS 0.15%Dec 3, 2025
- Medium6.5An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate.Check if you run itEPSS 0.28%Dec 3, 2025
- High8.7Allocation of Resources Without Limits or Throttling, Improper Validation of Specified Quantity in Input vulnerability in The Qt Company Qt on Windows, MacOS, Linux, iOS, Android,Check if you run itEPSS 0.32%Dec 3, 2025
- Medium5.5Rhino is an open-source implementation of JavaScript written entirely in Java.Check if you run itEPSS 0.27%Dec 3, 2025
- High8.1Untrusted search path in auth_query connection handler in PgBouncer before 1.25.1 allows an unauthenticated attacker to execute arbitrary SQL during authentication via a maliciousCheck if you run itEPSS 0.36%Dec 3, 2025
- High7.5A flaw was found in Undertow that can cause remote denial of service attacks.Check if you run itEPSS 1.36%Dec 3, 2025
- Critical9.7DeepChat is a smart assistant uses artificial intelligence.Check if you run itEPSS 0.61%Dec 3, 2025
- High7.2Collabora Online - Built-in CODE Server (richdocumentscode) provides a built-in server with all of the document editing features of Collabora Online.Check if you run itEPSS 1.83%Dec 3, 2025
- High8.8NVIDIA TAO contains a vulnerability where an attacker may cause a resource to be loaded via an uncontrolled search path.Check if you run itEPSS 0.42%Dec 3, 2025
- High7.5NVIDIA Triton Server for Linux contains a vulnerability where an attacker may cause an improper validation of specified quantity in input.Check if you run itEPSS 0.68%Dec 3, 2025
- High7.5NVIDIA Triton Inference Server contains a vulnerability where an attacker may cause an improper check for unusual or exceptional conditions issue by sending extra large payloads.Check if you run itEPSS 0.94%Dec 3, 2025
- High7.3MCP Gateway allows easy and secure running and deployment of MCP servers.Check if you run itEPSS 0.43%Dec 3, 2025
- High7.9GZDoom is a feature centric port for all Doom engine games.Check if you run itEPSS 0.14%Dec 3, 2025
- Medium5.4In Splunk MCP Server app versions below 0.2.4, a user with access to the "run_splunk_query" Model Context Protocol (MCP) tool could bypass the SPL command allowlist controls in MCPCheck if you run itEPSS 0.22%Dec 3, 2025
Sort