Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.3Uninitialized memory in the Audio/Video: Web Codecs component.Check if you run itEPSS 0.31%Apr 21, 2026
- High8.8Privilege escalation in the Graphics: WebRender component.Check if you run itEPSS 0.48%Apr 21, 2026
- High7.5Information disclosure due to uninitialized memory in the Graphics: Canvas2D component.Check if you run itEPSS 0.40%Apr 21, 2026
- Critical9.8Uninitialized memory in the Audio/Video: Web Codecs component.Check if you run itEPSS 0.40%Apr 21, 2026
- High7.5Use-after-free in the WebRTC component.Check if you run itEPSS 0.40%Apr 21, 2026
- High7.5Use-after-free in the DOM: Core & HTML component.Check if you run itEPSS 0.95%Apr 21, 2026
- High8.6FreePBX api module version 17.0.8 and prior contain a command injection vulnerability in the initiateGqlAPIProcess() function where GraphQL mutation input fields are p…Check if you run itEPSS 1.38%Apr 21, 2026
- Medium5.3Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Erlang OTP ssh (ssh_sftpd module) allows an authenticated SFTP user to…Check if you run itEPSS 0.37%Apr 21, 2026
- High8.7This vulnerability exists in Quantum Networks router due to improper access control and insecure default configuration in the web-based management interface.Check if you run itEPSS 0.26%Apr 21, 2026
- High7.6This vulnerability exists in Quantum Networks router due to lack of enforcement of strong password policies in the web-based management interface.Check if you run itEPSS 0.17%Apr 21, 2026
- High7.3Changing backend users' passwords via the user settings module results in storing the cleartext password in the uc and user_settings fields of the be_users database table.Check if you run itEPSS 0.17%Apr 21, 2026
- High8.7This vulnerability exists in Quantum Networks router due to missing rate limiting and CAPTCHA protection for failed login attempts in the web-based management interface.Check if you run itEPSS 0.20%Apr 21, 2026
- High8.7This vulnerability exists in Quantum Networks router due to inadequate sanitization of user-supplied input in the management CLI interface.Check if you run itEPSS 0.45%Apr 21, 2026
- Medium5.1Reflected Cross-Site Scripting (XSS) vulnerability in Navigate Content Management System.Check if you run itEPSS 0.34%Apr 21, 2026
- High7.2Deserialization of Untrusted Data vulnerability in MetaSlider Responsive Slider by MetaSlider allows Object Injection.This issue affects Responsive Slider by MetaSlide…Check if you run itEPSS 0.43%Apr 21, 2026
- High8.2Zervit's portable HTTP/web server is vulnerable to remote DoS attacks when a configuration reset request is made.Check if you run itEPSS 0.25%Apr 21, 2026
- Medium4.4The Website LLMs.txt plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 8.2.6 due to insufficie…Check if you run itEPSS 0.16%Apr 21, 2026
- Medium6.1The Website LLMs.txt plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab' parameter in all versions up to, and including, 8.2.6.Check if you run itEPSS 0.21%Apr 21, 2026
- Medium4.3The Responsive Blocks – Page Builder for Blocks & Patterns plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 2.2.1.Check if you run itEPSS 0.23%Apr 21, 2026
- Medium6.3Honor E APP is affected by information leak vulnerability, successful exploitation of this vulnerability may affect service confidentiality.Check if you run itEPSS 0.19%Apr 21, 2026
- Low3.2PcManager is affected by type privilege bypass, successful exploitation of this vulnerability may affect service availabilityCheck if you run itEPSS 0.10%Apr 21, 2026
- High7.8AiAssistant is affected by type privilege bypass, successful exploitation of this vulnerability may affect service availability.Check if you run itEPSS 0.14%Apr 21, 2026
- Critical9.3NewSoftOA developed by NewSoft has an OS Command Injection vulnerability, allowing unauthenticated local attackers to inject arbitrary OS commands and execute them on the server.Check if you run itEPSS 1.64%Apr 21, 2026
- Medium5.3The Responsive Blocks – Page Builder for Blocks & Patterns plugin for WordPress is vulnerable to Unauthenticated Open Email Relay in all versions up to, and including, 2.2.0.Check if you run itEPSS 0.33%Apr 21, 2026
- Medium6.5The Plugin: CMS für Motorrad Werkstätten plugin for WordPress is vulnerable to SQL Injection via the 'arttype' parameter in all versions up to, and including, 1.0.0 du…Check if you run itEPSS 0.32%Apr 21, 2026
Sort