Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7A vulnerability was found in Tenda F453 1.0.0.3.Check if you run itEPSS 0.85%Mar 1, 2026
- High8.7A vulnerability has been found in Tenda F453 1.0.0.3.Check if you run itEPSS 0.82%Mar 1, 2026
- High8.7A flaw has been found in Tenda F453 1.0.0.3.Check if you run itEPSS 0.74%Mar 1, 2026
- Critical9.8In multiple locations, there is a possible out of bounds read and write due to a heap buffer overflow.Check if you run itEPSS 0.64%Mar 1, 2026
- High8.7A vulnerability was detected in Tenda F453 1.0.0.3.Check if you run itEPSS 0.82%Feb 28, 2026
- High8.7A security vulnerability has been detected in Tenda F453 1.0.0.3.Check if you run itEPSS 0.82%Feb 28, 2026
- High8.8wpForo 2.4.14 contains an unauthenticated SQL injection vulnerability in Topics::get_topics() where the ORDER BY clause relies on ineffective esc_sql() sanitization on unquoted ideCheck if you run itEPSS 0.48%Feb 28, 2026
- Medium4.8wpForo Forum 2.4.14 contains a stored cross-site scripting vulnerability that allows administrators to inject persistent JavaScript via forum description fields echoed without outpCheck if you run itEPSS 0.27%Feb 28, 2026
- Medium4.8wpForo Forum 2.4.14 contains a stored cross-site scripting vulnerability that allows script injection via forum URL data output into an inline script block using json_encode withouCheck if you run itEPSS 0.27%Feb 28, 2026
- Medium6.9wpForo Forum 2.4.14 contains an information disclosure vulnerability that allows unauthenticated users to retrieve private and unapproved forum topics via the global RSS feed endpoCheck if you run itEPSS 0.39%Feb 28, 2026
- Medium5.1wpForo Forum 2.4.14 contains a stored cross-site scripting vulnerability that allows authenticated subscribers to upload SVG files as profile avatars through the avatar upload funcCheck if you run itEPSS 0.25%Feb 28, 2026
- High7.1wpForo Forum 2.4.14 contains a missing capability check vulnerability that allows authenticated users to trigger bulk wpForo usergroup reassignment via the wpforo_synch_roles AJAXCheck if you run itEPSS 0.31%Feb 28, 2026
- Medium5.3wpForo Forum 2.4.14 contains a missing authorization vulnerability that allows authenticated subscribers to move, merge, or split any forum topic via the topic_move, topic_merge, aCheck if you run itEPSS 0.25%Feb 28, 2026
- Medium5.3wpForo Forum 2.4.14 contains a missing authorization vulnerability that allows authenticated subscribers to close or reopen any forum topic via the wpforo_close_ajax handler.Check if you run itEPSS 0.30%Feb 28, 2026
- Medium5.3wpForo Forum 2.4.14 contains a missing authorization vulnerability that allows authenticated subscribers to approve or unapprove any forum post via the wpforo_approve_ajax AJAX hanCheck if you run itEPSS 0.30%Feb 28, 2026
- Critical9.3Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Microchip TimePictra allows Query System for Information.This issue affCheck if you run itEPSS 0.18%Feb 28, 2026
- Critical9.3Missing Authentication for Critical Function vulnerability in Microchip TimePictra allows Configuration/Environment Manipulation.This issue affects TimePictra: from 11.0 through 11Check if you run itEPSS 0.29%Feb 28, 2026
- High7.5Themeum tutor_lms Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.53%Feb 28, 2026
- High7.5The WP Mail Logging plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.15.0 via deserialization of untrusted input from the email loCheck if you run itEPSS 0.46%Feb 28, 2026
- Medium6.5The Super Stage WP WordPress plugin through 1.0.1 unserializes user input via REQUEST, which could allow unauthenticated users to perform PHP Object Injection when a suitable gadgeCheck if you run itEPSS 0.22%Feb 28, 2026
- High8.7Statmatic is a Laravel and Git powered content management system (CMS).Check if you run itEPSS 0.29%Feb 27, 2026
- High8.0Statmatic is a Laravel and Git powered content management system (CMS).Check if you run itEPSS 0.50%Feb 27, 2026
- Medium5.3Featured Image from Content (featured-image-from-content) WordPress plugin versions prior to 1.7 contain an authenticated server-side request forgery vulnerability that allows AuthCheck if you run itEPSS 0.27%Feb 27, 2026
- High7.8Vim is an open source, command line text editor.Check if you run itEPSS 0.21%Feb 27, 2026
- High7.8Vim is an open source, command line text editor.Check if you run itEPSS 1.35%Feb 27, 2026
Sort