Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1A user able to connect to Agent 2 can inject an Oracle TNS connection string via the 'service' parameter.Check if you run itEPSS 0.22%May 6, 2026
- High7.3An authenticated (non-super) administrator can create a maintenance period with a JavaScript payload that is executed by any user that opens tooltip for that maintenan…Check if you run itEPSS 0.26%May 6, 2026
- Medium4.3The Ninja Tables – Easy Data Table Builder plugin for WordPress is vulnerable to unauthorized database table creation due to missing authorization checks on the functi…Check if you run itEPSS 0.25%May 6, 2026
- Medium6.5The All-in-One WP Migration Unlimited Extension plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 2.83.Check if you run itEPSS 0.27%May 6, 2026
- Medium5.3The Mercado Pago payments for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'mp_pix_image' Woo…Check if you run itEPSS 0.50%May 6, 2026
- High7.7An authorization bypass (CWE-639) in the GetUserRoles gRPC API endpoint in Velocidex Velociraptor below version 0.76.5 allows any authenticated low-privilege user to r…Check if you run itEPSS 0.26%May 6, 2026
- Medium5.5An off-by-one error (CWE-193) in the ConsumeUnit16Array and ConsumeUnit64Array functions in Velocidex Velociraptor before version 0.76.5 on Windows and Linux allows a…Check if you run itEPSS 0.14%May 6, 2026
- High7.5In nr modem, there is a possible improper input validation.Check if you run itEPSS 0.30%May 6, 2026
- High7.5In Modem IMS, there is a possible improper input validation.Check if you run itEPSS 0.31%May 6, 2026
- High7.5In Modem IMS, there is a possible improper input validation.Check if you run itEPSS 0.32%May 6, 2026
- High7.5In Modem IMS, there is a possible improper input validation.Check if you run itEPSS 0.32%May 6, 2026
- High7.5In Modem IMS, there is a possible improper input validation.Check if you run itEPSS 0.33%May 6, 2026
- High7.5In IMS, there is a possible system crash due to improper input validation.Check if you run itEPSS 0.30%May 6, 2026
- Low3.4In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.Check if you run itEPSS 0.11%May 6, 2026
- High7.6Jupyter Server is the backend for Jupyter web applications.Check if you run itEPSS 0.33%May 5, 2026
- High7.6Jupyter Server is the backend for Jupyter web applications.Check if you run itEPSS 0.31%May 5, 2026
- High8.2OpenMRS Core is an open source electronic medical record system platform.Check if you run itEPSS 0.56%May 5, 2026
- Critical9.8Heap-based Buffer Overflow vulnerability in mod_proxy_ajp of Apache HTTP Server.Check if you run itEPSS 1.38%May 5, 2026
- Medium6.0Dify before version 1.14.0 contains an authorization bypass vulnerability that allows authenticated users to read the full contents of files uploaded by other users wi…Check if you run itEPSS 0.35%May 5, 2026
- High7.7In versions 2.1.63 through 2.1.83 of Claude Code, the folder trust determination logic used the git worktree commondir file without validating its contents.Check if you run itEPSS 0.31%May 5, 2026
- High8.8Quarkus is a Java framework for building cloud-native applications.Check if you run itEPSS 0.71%May 5, 2026
- High8.7Pi-hole FTL is the core engine of the Pi-hole network-level advertisement and tracker blocker.Check if you run itEPSS 0.96%May 5, 2026
- Medium4.3lxc is a Linux container runtime.Check if you run itEPSS 0.16%May 5, 2026
- Medium6.9Gotenberg is an API-based document conversion tool.Check if you run itEPSS 0.24%May 5, 2026
- High8.2CoreDNS is a DNS server written in Go.Check if you run itEPSS 0.61%May 5, 2026
Sort