Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1Uncontrolled Resource Consumption vulnerability in hexpm hexpm/hexpm allows Excessive Allocation.Check if you run itEPSS 0.52%Mar 13, 2026
- Critical10.0SandboxJS is a JavaScript sandboxing library.Check if you run itEPSS 0.62%Mar 13, 2026
- Medium6.3In JetBrains Datalore before 2026.1 session hijacking was possible due to missing secure attribute for cookie settingsCheck if you run itEPSS 0.11%Mar 13, 2026
- High8.7Path Traversal in Clasp impacting versions < 3.2.0 allows a remote attacker to perform remote code execution via a malicious Google Apps Script project containing specially craftedCheck if you run itEPSS 0.52%Mar 13, 2026
- Medium6.3Malicious configuration can lead to unauthorized file access in Apache Livy.Check if you run itEPSS 0.56%Mar 13, 2026
- Medium6.3Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Livy.Check if you run itEPSS 0.68%Mar 13, 2026
- High8.5There is a memory corruption vulnerability due to an out-of-bounds read when loading a corrupted file in Digilent DASYLab.Check if you run itEPSS 0.27%Mar 13, 2026
- High8.5There is a memory corruption vulnerability due to an out-of-bounds read when loading a corrupted file in Digilent DASYLab.Check if you run itEPSS 0.24%Mar 13, 2026
- High8.5There is a memory corruption vulnerability due to an out-of-bounds write when loading a corrupted file in Digilent DASYLab.Check if you run itEPSS 0.27%Mar 13, 2026
- High8.5There is a memory corruption vulnerability due to an out-of-bounds write when loading a corrupted DSB file in Digilent DASYLab.Check if you run itEPSS 0.24%Mar 13, 2026
- Medium6.5Issue summary: An OpenSSL TLS 1.3 server may fail to negotiate the expected preferred key exchange group when its key exchange group configuration includes the default by using theCheck if you run itEPSS 0.48%Mar 13, 2026
- High7.2Missing authentication for critical function vulnerability in ABB AWIN GW100 rev.2, ABB AWIN GW120.This issue affects AWIN GW100 rev.2: 2.0-0, 2.0-1; AWIN GW120: 1.2-0, 1.2-1.Check if you run itEPSS 0.32%Mar 13, 2026
- High7.1Missing authentication for critical function vulnerability in ABB AWIN GW100 rev.2, ABB AWIN GW120.This issue affects AWIN GW100 rev.2: 2.0-0, 2.0-1; AWIN GW120: 1.2-0, 1.2-1.Check if you run itEPSS 0.30%Mar 13, 2026
- High7.2Authentication bypass by capture-replay vulnerability in ABB AWIN GW100 rev.2, ABB AWIN GW120.This issue affects AWIN GW100 rev.2: 2.0-0, 2.0-1; AWIN GW120: 1.2-0, 1.2-1.Check if you run itEPSS 0.25%Mar 13, 2026
- High7.5Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchiveCheck if you run itEPSS 0.77%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in CyberChimps Responsive Blocks responsive-block-editor-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issCheck if you run itEPSS 0.21%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in raratheme Lawyer Landing Page lawyer-landing-page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affectsCheck if you run itEPSS 0.20%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in wptravelengine Travel Booking travel-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TraveCheck if you run itEPSS 0.21%Mar 13, 2026
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liton Arefin Master Addons for Elementor master-addons allows DOM-Based XSS.ThCheck if you run itEPSS 0.21%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in Really Simple Plugins Really Simple SSL really-simple-ssl allows Exploiting Incorrectly Configured Access Control Security Levels.This issueCheck if you run itEPSS 0.19%Mar 13, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themefic Ultimate Addons for Contact Form 7 ultimate-addons-for-contact-form-7Check if you run itEPSS 0.16%Mar 13, 2026
- High8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in flycart UpsellWP checkout-upsell-and-order-bumps allows Blind SQL Injection.ThCheck if you run itEPSS 0.25%Mar 13, 2026
- High7.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RealMag777 WOLF bulk-editor allows Blind SQL Injection.This issue affects WOLFCheck if you run itEPSS 0.26%Mar 13, 2026
- Medium5.3Missing Authorization vulnerability in Wombat Plugins Advanced Product Fields (Product Addons) for WooCommerce advanced-product-fields-for-woocommerce allows Exploiting IncorrectlyCheck if you run itEPSS 0.20%Mar 13, 2026
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Janis Elsts Admin Menu Editor admin-menu-editor allows Cross Site Request Forgery.This issue affects Admin Menu Editor: from n/aCheck if you run itEPSS 0.11%Mar 13, 2026
Sort