Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Authorization Bypass Through User-Controlled Key vulnerability in YITH YITH WooCommerce Wishlist allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.32%May 7, 2026
- Medium5.3Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in weDevs Happy Addons for Elementor allows Retrieve Embedded Sensitive Data.Check if you run itEPSS 0.34%May 7, 2026
- Medium5.3Missing Authorization vulnerability in WProyal Royal Elementor Addons allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.24%May 7, 2026
- Medium5.4Cross-Site Request Forgery (CSRF) vulnerability in WPGraphQL allows Cross Site Request Forgery.Check if you run itEPSS 0.09%May 7, 2026
- High7.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPMart Team Member allows Blind SQL Injection.Check if you run itEPSS 0.23%May 7, 2026
- Medium5.3Missing Authorization vulnerability in Magepeople inc.Check if you run itEPSS 0.17%May 7, 2026
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WEN Themes WEN Logo Slider allows DOM-Based XSS.Check if you run itEPSS 0.14%May 7, 2026
- Medium5.3Improper restriction of excessive authentication attempts vulnerability in Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900,…Check if you run itEPSS 0.30%May 7, 2026
- Critical9.8Remote Code Execution Vulnerability in Hitachi Storage Navigator and the maintenance console in Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F3…Check if you run itEPSS 0.55%May 7, 2026
- High8.0A low privileged remote attacker can gain the root password due to improper removal of sensitive information before storage or transfer.Check if you run itEPSS 0.34%May 7, 2026
- Medium5.4Out-of-bounds write vulnerability in The Document Foundation LibreOffice via crafted OOXML documents with mismatched encryption salt parameters.Check if you run itEPSS 0.08%May 7, 2026
- High7.8ZTE Cloud PC client uSmartView contains a DLL hijacking vulnerability; since uSmartViewServiceAgent.exe runs with SYSTEM privileges, successful hijacking enables local…Check if you run itEPSS 0.16%May 7, 2026
- Critical9.8OS command injection vulneravility in the management gui (maintenance utility) of Hitachi Virtual Storage Platform One Block 23, 24, 26 and 28.Check if you run itEPSS 0.90%May 7, 2026
- High7.1An authenticated user can crash mongod when running $rankFusion or $scoreFusion with an empty pipeline on a view.Check if you run itEPSS 0.23%May 7, 2026
- High8.1The WP-Optimize – Cache, Compress images, Minify & Clean database to boost page speed & performance plugin for WordPress is vulnerable to arbitrary file deletion due t…Check if you run itEPSS 0.95%May 7, 2026
- High7.5Improper Neutralization of Special Elements used in an SQL CommandPatch nowKEVEPSS 0.40%May 7, 2026
- High7.2NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions.Check if you run itEPSS 1.83%May 7, 2026
- Critical9.3Hyperledger Fabric is an enterprise-grade permissioned distributed ledger framework for developing solutions and applications.Check if you run itEPSS 0.53%May 7, 2026
- High7.7Istio is an open platform to connect, manage, and secure microservices.Check if you run itEPSS 0.33%May 7, 2026
- High8.8YesWiki is a wiki system written in PHP.Check if you run itEPSS 0.34%May 7, 2026
- High8.8Math.js is an extensive math library for JavaScript and Node.js.Check if you run itEPSS 0.58%May 7, 2026
- Medium6.5The Forminator Forms plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 1.53.0.Check if you run itEPSS 0.44%May 7, 2026
- Critical9.1Tor before 0.4.9.7 has an out-of-bounds read by one byte via a malformed BEGIN cell, aka TROVE-2026-007.Check if you run itEPSS 0.34%May 7, 2026
- High7.5Tor before 0.4.9.7 has a NULL pointer dereference when a CERT cell is received out of order, aka TROVE-2026-006.Check if you run itEPSS 0.33%May 7, 2026
- High7.5Tor before 0.4.9.7, when circuit queue memory pressure exists, can experience a client crash because of a double close of a circuit, aka TROVE-2026-009.Check if you run itEPSS 0.34%May 7, 2026
Sort