Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5A weakness has been identified in SourceCodester Pizzafy Ecommerce System 1.0.Check if you run itEPSS 0.25%Apr 28, 2026
- Medium5.5A security flaw has been discovered in SourceCodester Pizzafy Ecommerce System 1.0.Check if you run itEPSS 0.25%Apr 28, 2026
- Medium6.4The Social Post Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Threads embed handler in all versions up to, and including, 2.0.1.Check if you run itEPSS 0.19%Apr 28, 2026
- Medium6.4The WPC Smart Messages for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'text' attribute of the shortcode in all versions up t…Check if you run itEPSS 0.19%Apr 28, 2026
- Medium6.4The Timeline Blocks for Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'titleTag' attribute of the timeline-blocks/tb-timeline-blo…Check if you run itEPSS 0.19%Apr 28, 2026
- High7.2OpenStack Ironic before 35.0.1 allows ipmitool execution in a non-default configuration that has a console interface.Check if you run itEPSS 0.57%Apr 28, 2026
- High7.5In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /Check if you run itEPSS 0.65%Apr 28, 2026
- Medium5.5A vulnerability was identified in BigSweetPotatoStudio HyperChat up to 2.0.0-alpha.63.Check if you run itEPSS 0.28%Apr 28, 2026
- Low2.0A vulnerability was determined in code-projects Coaching Management System 1.0.Check if you run itEPSS 0.23%Apr 28, 2026
- Medium5.5A vulnerability was found in TencentCloudBase CloudBase-MCP up to 2.17.0.Check if you run itEPSS 0.30%Apr 28, 2026
- Medium5.5A vulnerability has been found in jackwrichards FastlyMCP up to 6f3d0b0e654fc51076badc7fa16c03c461f95620.Check if you run itEPSS 1.47%Apr 28, 2026
- High7.3A flaw has been found in Totolink N300RT 3.4.0-B20250430.Check if you run itEPSS 0.59%Apr 28, 2026
- High7.3A vulnerability was detected in Totolink N300RT 3.4.0-B20250430.Check if you run itEPSS 0.46%Apr 28, 2026
- Medium5.5A security vulnerability has been detected in Deepractice PromptX up to 2.4.0.Check if you run itEPSS 0.44%Apr 28, 2026
- Medium5.5A weakness has been identified in donchelo processing-claude-mcp-bridge up to e017b20a4b592a45531a6392f494007f04e661bd.Check if you run itEPSS 0.41%Apr 28, 2026
- Medium5.5A security flaw has been discovered in egtai gmx-vmd-mcp up to 0.1.0.Check if you run itEPSS 1.47%Apr 28, 2026
- High7.2A post-authentication command injection vulnerability in the “DomainName” parameter of the DHCP configuration file in Zyxel DX3301-T0 and EX3301-T0 firmware versions t…Check if you run itEPSS 1.16%Apr 28, 2026
- Medium6.8A post-authentication command injection vulnerability in the EasyMesh-related APIs of Zyxel DX3300-T0 firmware versions through 5.50(ABVY.7.1)C0 could allow an authent…Check if you run itEPSS 0.85%Apr 28, 2026
- Medium5.5A vulnerability was identified in eghuzefa engineer-your-data up to 0.1.3.Check if you run itEPSS 0.41%Apr 28, 2026
- Medium5.5A vulnerability was detected in ef10007 MLOps_MCP 1.0.0.Check if you run itEPSS 0.41%Apr 28, 2026
- Medium5.5A security vulnerability has been detected in edvardlindelof notes-mcp up to 0.1.4.Check if you run itEPSS 0.41%Apr 28, 2026
- Medium5.5A weakness has been identified in dvladimirov MCP up to 0.1.0.Check if you run itEPSS 1.47%Apr 28, 2026
- Medium5.5A security flaw has been discovered in dubydu sqlite-mcp up to 0.1.0.Check if you run itEPSS 0.28%Apr 28, 2026
- Medium5.5A vulnerability was identified in duartium papers-mcp-server 9ceb3812a6458ba7922ca24a7406f8807bc55598.Check if you run itEPSS 0.43%Apr 28, 2026
- High8.9A vulnerability was determined in Totolink A8000RU 7.1cu.643_b20200521.Check if you run itEPSS 2.45%Apr 28, 2026
Sort