Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.9A zone transition from NSEC to NSEC3 might trigger an internal inconsistency and cause a denial of service.Check if you run itEPSS 0.24%Apr 22, 2026
- High7.5An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service.Check if you run itEPSS 0.52%Apr 22, 2026
- Medium5.0Having many concurrent transfers of the same RPZ can lead to inconsistent RPZ data, use after free and/or a crash of the recursor.Check if you run itEPSS 0.22%Apr 22, 2026
- High7.5By publishing and querying a crafted zone an attacker can cause allocation of large entries in the negative and aggressive NSEC(3) caches.Check if you run itEPSS 0.58%Apr 22, 2026
- High7.5An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service.Check if you run itEPSS 0.51%Apr 22, 2026
- High7.5An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service.Check if you run itEPSS 0.61%Apr 22, 2026
- Medium4.3The Emailchef plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the page_options_ajax_disconnect() function…Check if you run itEPSS 0.26%Apr 22, 2026
- Medium6.4The Gallagher Website Design plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's login_link shortcode in all versions up to, and includi…Check if you run itEPSS 0.25%Apr 22, 2026
- Medium6.4The Gutentools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Slider block's block_id attribute in all versions up to, and including, 1.1.3.Check if you run itEPSS 0.24%Apr 22, 2026
- High7.8A flaw was found in binutils.Check if you run itEPSS 0.17%Apr 22, 2026
- Medium5.0A flaw was found in binutils, specifically within the utility.Check if you run itEPSS 0.15%Apr 22, 2026
- Medium5.5A flaw was found in the utility of the binutils package.Check if you run itEPSS 0.10%Apr 22, 2026
- Medium5.5A flaw was found in nano.Check if you run itEPSS 0.11%Apr 22, 2026
- Medium4.3The Fast & Fancy Filter – 3F plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to and including 1.2.2.Check if you run itEPSS 0.18%Apr 22, 2026
- Medium4.3The Google PageRank Display plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to and including 1.4.Check if you run itEPSS 0.20%Apr 22, 2026
- Medium6.4The Simple Random Posts Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'container_right_width' attribute of the 'simple_random_pos…Check if you run itEPSS 0.23%Apr 22, 2026
- Medium6.4The Posts map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'name' shortcode attribute in all versions up to, and including, 0.1.3 due to i…Check if you run itEPSS 0.24%Apr 22, 2026
- Critical9.8The Sendmachine for WordPress plugin for WordPress is vulnerable to authorization bypass via the 'manage_admin_requests' function in all versions up to, and including, 1.0.20.Check if you run itEPSS 0.58%Apr 22, 2026
- Medium4.4The Buzz Comments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Custom Buzz Avatar' (buzz_comments_avatar_image) setting in all versions u…Check if you run itEPSS 0.25%Apr 22, 2026
- Medium6.4The Zypento Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Table of Contents block in all versions up to, and including, 1.0.6.Check if you run itEPSS 0.23%Apr 22, 2026
- Medium6.4The SlideShowPro SC plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode in all versions up to, and including, 1.0.2 due to ins…Check if you run itEPSS 0.23%Apr 22, 2026
- Medium6.4The Text Snippets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode in all versions up to, and including, 0.0.1 due to insuf…Check if you run itEPSS 0.23%Apr 22, 2026
- Medium6.4The CI HUB Connector plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' attribute of the shortcode in all versions up to, and including, 1.…Check if you run itEPSS 0.24%Apr 22, 2026
- Medium6.5The Breaking News WP plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.3.Check if you run itEPSS 0.81%Apr 22, 2026
- Medium6.4The Bread & Butter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'breadbutter-customevent-button' shortcode in all versions up to, and incl…Check if you run itEPSS 0.24%Apr 22, 2026
Sort