Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3MailGates/MailAudit developed by Openfind has a Stack-based Buffer Overflow vulnerability, allowing unauthenticated remote attackers to control the program's execution…Check if you run itEPSS 0.78%Apr 16, 2026
- Critical9.3The iSherlock developed by HGiga has an OS Command Injection vulnerability, allowing unauthenticated local attackers to inject arbitrary OS commands and execute them o…Check if you run itEPSS 2.07%Apr 16, 2026
- Critical9.3WinMatrix agent developed by Simopro Technology has a Missing Authentication vulnerability, allowing authenticated local attackers to execute arbitrary code with SYSTE…Check if you run itEPSS 0.18%Apr 16, 2026
- High7.4radare2 before 9236f44, when configured on UNIX without SSL, allows command injection via a PDB name to rabin2 -PP.Check if you run itEPSS 1.20%Apr 16, 2026
- Medium6.4The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'su_box' shortcode in all versions up…Check if you run itEPSS 0.34%Apr 16, 2026
- Medium5.4A Download of Code Without Integrity Check vulnerability in the update modules in ASUS Member Center(华硕大厅) allows a local user to achieve privilege escalation to Admin…Check if you run itEPSS 0.08%Apr 16, 2026
- Medium5.4An Incorrect Permission Assignment for Critical Resource vulnerability in the ASUS DriverHub update process allows privilege escalation due to improper protection of r…Check if you run itEPSS 0.14%Apr 16, 2026
- UnknownMalicious code in nj-logger (npm)Open the advisoryApr 16, 2026
- Critical9.8FFmpeg before 8.1 has an integer overflow and resultant out-of-bounds write via CENC (Common Encryption) subsample data to libavformat/mov.c.Check if you run itEPSS 0.14%Apr 16, 2026
- Medium4.8MuPDF before 1.27 contains an ANSI injection vulnerability in mutool that allows attackers to inject arbitrary ANSI escape sequences through crafted PDF metadata fields.Check if you run itEPSS 0.17%Apr 16, 2026
- Critical9.3Creolabs Gravity before 0.9.6 contains a heap buffer overflow vulnerability in the gravity_vm_exec function that allows attackers to write out-of-bounds memory by craf…Check if you run itEPSS 0.66%Apr 16, 2026
- Medium6.4The WP YouTube Lyte plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'lyte' shortcode in all versions up to, and including, 1.7.29 du…Check if you run itEPSS 0.22%Apr 16, 2026
- High8.1Luanti 5 before 5.15.2 sometimes allows unintended access to an insecure environment.Check if you run itEPSS 0.17%Apr 16, 2026
- Critical9.3Luanti 5 before 5.15.2, when LuaJIT is used, allows a Lua sandbox escape via a crafted mod.Check if you run itEPSS 0.18%Apr 16, 2026
- High7.1OpenHarness prior to commit dd1d235 contains a path traversal vulnerability that allows remote gateway users with chat access to read arbitrary files by supplying path…Check if you run itEPSS 0.42%Apr 16, 2026
- High8.7OpenHarness prior to commit dd1d235 contains a command injection vulnerability that allows remote gateway users with chat access to invoke sensitive administrative com…Check if you run itEPSS 1.72%Apr 16, 2026
- Medium5.4Inadequate Encryption Strength vulnerability in TP-Link Archer C7 v5 and v5.8 (uhttpd modules) allows Password Recovery Exploitation.Check if you run itEPSS 0.10%Apr 16, 2026
- Critical9.8The Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale) plugin for WordPress is vulnerable to privilege escalation via ins…Check if you run itEPSS 0.51%Apr 16, 2026
- High8.2maddy is a composable, all-in-one mail server.Check if you run itEPSS 0.43%Apr 16, 2026
- UnknownMalicious code in trgrip (npm)Open the advisoryApr 15, 2026
- High7.5Free5GC is an open-source Linux Foundation project for 5th generation (5G) mobile core networks.Check if you run itEPSS 0.52%Apr 15, 2026
- Medium4.3The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to Missing…Check if you run itEPSS 0.32%Apr 15, 2026
- High8.8OWASP BLT is a QA testing and vulnerability disclosure platform that encompasses websites, apps, git repositories, and more.Check if you run itEPSS 0.42%Apr 15, 2026
- Low2.9Yubico libfido2 before 1.17.0, python-fido2 before 2.2.0, and yubikey-manager before 5.9.1 have an unintended DLL search path.Check if you run itEPSS 0.13%Apr 15, 2026
- High8.7Pillow is a Python imaging library.Check if you run itEPSS 0.70%Apr 15, 2026
Sort