Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5The HTTP Headers plugin for WordPress is vulnerable to CRLF Injection in all versions up to, and including, 1.19.2.Check if you run itEPSS 0.47%Apr 22, 2026
- Medium4.4The Institute Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Enquiry Form Title' setting in all versions up to, and including, 5.5.Check if you run itEPSS 0.29%Apr 22, 2026
- Medium5.5The Real Estate Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.0.9 due to insufficien…Check if you run itEPSS 0.24%Apr 22, 2026
- Medium4.4The HTTP Headers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.19.2 due to insufficient…Check if you run itEPSS 0.29%Apr 22, 2026
- Low2.5A flaw was found in nano.Check if you run itEPSS 0.08%Apr 22, 2026
- Critical9.8In Progress® Telerik® UI for AJAX versions 2024.4.1114 through 2026.1.421, the RadFilter control is vulnerable to insecure deserialization when restoring filter state…Check if you run itEPSS 0.54%Apr 22, 2026
- High7.5In Progress® Telerik® UI for AJAX prior to 2026.1.421, RadAsyncUpload contains an uncontrolled resource consumption vulnerability that allows file uploads to exceed th…Check if you run itEPSS 0.29%Apr 22, 2026
- High7.3Missing critical step in authentication in Apache HttpClient 5.6 allows an attacker to cause the client to accept SCRAM-SHA-256 authentication without proper mutual au…Check if you run itEPSS 0.54%Apr 22, 2026
- Medium5.5Missing bounds validation for operator could allow out of range operator-code lookup during model loading Affected version is prior to commit 1.30.0.Check if you run itEPSS 0.10%Apr 22, 2026
- Medium6.6Improper validation of STRING tensor offsets could allows malformed string metadata to trigger out of bounds access during constant tensor import in Samsung Open Sourc…Check if you run itEPSS 0.10%Apr 22, 2026
- Medium6.6Integer overflow in constant tensor data size calculation in Samsung Open Source ONE could cause incorrect buffer sizing for large constant nodes.Check if you run itEPSS 0.16%Apr 22, 2026
- Medium6.6Integer overflow in tensor copy size calculation in Samsung Open Source ONE could lead to out of bounds access during loop state propagation.Check if you run itEPSS 0.14%Apr 22, 2026
- Medium6.1Integer overflow in scratch buffer initialization size calculation in Samsung Open Source ONE cause incorrect memory initialization for large intermediate tensors.Check if you run itEPSS 0.14%Apr 22, 2026
- Medium6.6Integer overflow in memory copy size calculation in Samsung Open Source ONE could lead to invalid memory operations with large tensor shapes.Check if you run itEPSS 0.10%Apr 22, 2026
- Medium6.6Integer overflow in output tensor copy size calculation in Samsung Open Source ONE could cause incorrect copy length and memory corruption for oversized tensors.Check if you run itEPSS 0.14%Apr 22, 2026
- Medium6.6Integer overflow in buffer size calculation could result in out of bounds memory access when handling large tensors in Samsung Open Source ONE.Check if you run itEPSS 0.14%Apr 22, 2026
- Medium5.3Potential Integer overflow in tensor allocation size calculation could lead to insufficient memory allocation for large tensors in Samsung Open Source ONE.Check if you run itEPSS 0.12%Apr 22, 2026
- High7.5Vulnerability in Spring Spring Security.Check if you run itEPSS 0.27%Apr 22, 2026
- High7.5Vulnerability in Spring Spring Security.Check if you run itEPSS 0.25%Apr 22, 2026
- Medium6.5Vulnerability in Spring Spring Security.Check if you run itEPSS 0.20%Apr 22, 2026
- High8.1Vulnerability in Spring Spring Security.Check if you run itEPSS 0.24%Apr 22, 2026
- Low3.7Vulnerability in Spring Spring Security.Check if you run itEPSS 0.21%Apr 22, 2026
- Medium5.1DeepL Chrome browser extension versions from v1.22.0 to v.1.23.0 contain a cross-site scripting vulnerability, which allows an attacker to execute arbitrary script in…Check if you run itEPSS 0.17%Apr 22, 2026
- Medium5.1The a+HCM developed by aEnrich has an Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload arbitrary files to any path, including H…Check if you run itEPSS 0.21%Apr 22, 2026
- High7.1The a+HRD developed by aEnrich has a Missing Authorization vulnerability, allowing authenticated remote attackers to arbitrarily read database contents through a speci…Check if you run itEPSS 0.26%Apr 22, 2026
Sort