Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in ThemeFusion Avada allows Cross Site Request Forgery.This issue affects Avada: from n/a before 7.13.2.Check if you run itEPSS 0.10%Apr 22, 2026
- Medium5.1Carbon Forum 5.9.0 contains a persistent cross-site scripting vulnerability that allows authenticated administrators to inject malicious JavaScript code through the Fo…Check if you run itEPSS 0.20%Apr 22, 2026
- Critical9.3ELBA5 5.8.0 contains a remote code execution vulnerability that allows attackers to obtain database credentials and execute arbitrary commands with SYSTEM level permissions.Check if you run itEPSS 0.42%Apr 22, 2026
- Medium6.9Textpad 8.1.2 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long buffer string through th…Check if you run itEPSS 0.18%Apr 22, 2026
- Critical9.3ThinkPHP ThinkPHP Authorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 0.89%Apr 22, 2026
- Medium5.1ICEWARP 10.3.4 and 11.0.0.0 contains a cross-site scripting vulnerability that allows attackers to inject malicious HTML elements into emails by embedding base64-encod…Check if you run itEPSS 0.23%Apr 22, 2026
- High8.6LanSpy 2.0.1.159 contains a local buffer overflow vulnerability that allows attackers to overwrite the instruction pointer by supplying oversized input to the scan field.Check if you run itEPSS 0.20%Apr 22, 2026
- Medium6.9UltraISO 9.7.1.3519 contains a local buffer overflow vulnerability in the Output FileName field of the Make CD/DVD Image dialog that allows attackers to overwrite SEH…Check if you run itEPSS 0.18%Apr 22, 2026
- Medium6.9Angry IP Scanner 3.5.3 contains a buffer overflow vulnerability in the preferences dialog that allows local attackers to crash the application by supplying an excessiv…Check if you run itEPSS 0.18%Apr 22, 2026
- High8.6LanSpy 2.0.1.159 contains a local buffer overflow vulnerability in the scan section that allows local attackers to execute arbitrary code by exploiting structured exce…Check if you run itEPSS 0.21%Apr 22, 2026
- Medium6.9Angry IP Scanner for Linux 3.5.3 contains a denial of service vulnerability that allows local attackers to crash the application by supplying malformed input to the po…Check if you run itEPSS 0.18%Apr 22, 2026
- High8.6Iperius Backup 5.8.1 contains a local buffer overflow vulnerability in the structured exception handling (SEH) mechanism that allows local attackers to execute arbitra…Check if you run itEPSS 0.21%Apr 22, 2026
- High8.6MAGIX Music Editor 3.1 contains a buffer overflow vulnerability in the FreeDB Proxy Options dialog that allows local attackers to execute arbitrary code by exploiting…Check if you run itEPSS 0.21%Apr 22, 2026
- High8.6Terminal Services Manager 3.1 contains a stack-based buffer overflow vulnerability in the computer names field that allows local attackers to execute arbitrary code by…Check if you run itEPSS 0.19%Apr 22, 2026
- High8.5An issue was discovered in guardsix (formerly Logpoint) ODBC Enrichment Plugins before 5.2.1 (5.2.1 is used in guardsix 7.9.0.0).Check if you run itEPSS 0.21%Apr 22, 2026
- Medium5.5A flaw was found in libefiboot, a component of efivar.Check if you run itEPSS 0.12%Apr 22, 2026
- High7.1A flaw was found in GNU Emacs.Check if you run itEPSS 0.11%Apr 22, 2026
- High8.8A flaw was found in InstructLab.Check if you run itEPSS 0.44%Apr 22, 2026
- Critical9.6A vulnerability in the web application allows standard users to escalate their privileges to those of a super administrator through parameter manipulation, enabling th…Check if you run itEPSS 0.29%Apr 22, 2026
- Medium6.5A vulnerability in the web application allows unauthorized users to access and manipulate sensitive data across different tenants by exploiting insecure direct object references.Check if you run itEPSS 0.21%Apr 22, 2026
- High7.6An insecure direct object reference (IDOR) vulnerability in the Fullstep V5 registration process allows authenticated users to access data belonging to other registere…Check if you run itEPSS 0.21%Apr 22, 2026
- High8.7Inadequate access control in the registration process in Fullstep V5, which could allow unauthenticated users to obtain a valid JWT token with which to interact with a…Check if you run itEPSS 0.27%Apr 22, 2026
- High8.8PackageKit is a a D-Bus abstraction layer that allows the user to manage packages in a secure way using a cross-distro, cross-architecture API.Check if you run itEPSS 0.55%Apr 22, 2026
- Medium4.9An operator allowed to use the REST API can cause the Authoritative server to produce invalid HTTPS or SVCB record data, which can in turn cause LMDB database corrupti…Check if you run itEPSS 0.42%Apr 22, 2026
- High7.5A rogue primary server may cause file descriptor exhaustion and eventually a denial of service, when a PowerDNS secondary server forwards a DNS update request to it.Check if you run itEPSS 0.39%Apr 22, 2026
Sort