Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1In Splunk Enterprise versions below 10.2.1, 10.0.5, 9.4.10, and 9.3.11, and Splunk Cloud Platform versions below 10.4.2603.0, 10.3.2512.5, 10.2.2510.9, 10.1.2507.19, 10.0.2503.13,Check if you run itEPSS 3.15%Apr 15, 2026
- Medium6.6In Splunk Enterprise versions below 10.2.2, 10.0.5, 9.4.10, and 9.3.11, and Splunk Cloud Platform versions below 10.4.2603.0, 10.3.2512.6, 10.2.2510.10, 10.1.2507.20, 10.0.2503.13,Check if you run itEPSS 0.25%Apr 15, 2026
- Low1.3In Grafana's alerting system, users with edit permissions for a contact point, specifically the permissions “alert.notifications:write” or “alert.notifications.receivers:test” thatCheck if you run itEPSS 0.27%Apr 15, 2026
- High8.7Certain HP DeskJet All in One devices may be vulnerable to remote code execution caused by a buffer overflow when specially crafted Web Services for Devices (WSD) scan requests areCheck if you run itEPSS 0.32%Apr 15, 2026
- High7.3HP System Optimizer might potentially be vulnerable to escalation of privilege.Check if you run itEPSS 0.11%Apr 15, 2026
- High8.5During an internal security assessment, a potential vulnerability was discovered in Lenovo Software Fix that could allow a local authenticated user to perform arbitrar…Check if you run itEPSS 0.20%Apr 15, 2026
- Medium5.2During an internal security assessment, a potential vulnerability was discovered in Lenovo Software Fix, that during installation could allow a local authenticated use…Check if you run itEPSS 0.12%Apr 15, 2026
- High7.0During an internal security assessment, a potential vulnerability was discovered in Lenovo Software Fix, that during installation could allow a local authenticated use…Check if you run itEPSS 0.12%Apr 15, 2026
- Medium6.9During an internal security assessment, a potential vulnerability was discovered in Lenovo Diagnostics and the HardwareScanAddin used in Lenovo Vantage that, during in…Check if you run itEPSS 0.22%Apr 15, 2026
- Medium6.5The and connection properties were not marked as sensitive names in secrets masker.Check if you run itEPSS 0.56%Apr 15, 2026
- Medium5.4A potential DLL hijacking vulnerability was reported in Lenovo Service Bridge that, under certain conditions, could allow a local authenticated user to execute code with elevated pCheck if you run itEPSS 0.13%Apr 15, 2026
- Medium6.5Mattermost versions 10.11.x <= 10.11.12, 11.5.x <= 11.5.0, 11.4.x <= 11.4.2, 11.3.x <= 11.3.2 fail to enforce atomic single-use consumption of guest magic link tokens,…Check if you run itEPSS 0.15%Apr 15, 2026
- Medium6.1The Product Pricing Table by WooBeWoo plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.0.Check if you run itEPSS 0.13%Apr 15, 2026
- Medium4.3Missing Authorization vulnerability in Long Watch Studio MyRewards woorewards allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect…Check if you run itEPSS 0.15%Apr 15, 2026
- High8.1Authorization Bypass Through User-Controlled Key vulnerability in Mahmudul Hasan Arif FluentBoards fluent-boards allows Exploiting Incorrectly Configured Access Contro…Check if you run itEPSS 0.17%Apr 15, 2026
- Medium5.3Missing Authorization vulnerability in Majestic Support Majestic Support majestic-support allows Exploiting Incorrectly Configured Access Control Security Levels.This…Check if you run itEPSS 0.17%Apr 15, 2026
- High8.1Cross-Site Request Forgery (CSRF) vulnerability in Syed Balkhi Contact Form by WPForms wpforms-lite allows Cross Site Request Forgery.This issue affects Contact Form b…Check if you run itEPSS 0.10%Apr 15, 2026
- Medium5.3Missing Authorization vulnerability in WP Royal Royal Elementor Addons royal-elementor-addons allows Exploiting Incorrectly Configured Access Control Security Levels.T…Check if you run itEPSS 0.18%Apr 15, 2026
- High7.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in bdthemes Element Pack Elementor Addons bdthemes-element-pack-lite…Check if you run itEPSS 0.24%Apr 15, 2026
- High8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Beaver Builder Beaver Builder beaver-builder-lite-version allows…Check if you run itEPSS 0.23%Apr 15, 2026
- Medium5.3Missing Authorization vulnerability in Nelio Software Nelio AB Testing nelio-ab-testing allows Exploiting Incorrectly Configured Access Control Security Levels.This is…Check if you run itEPSS 0.19%Apr 15, 2026
- Medium5.4Missing Authorization vulnerability in Themeum Tutor LMS tutor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tutor LMS: fr…Check if you run itEPSS 0.18%Apr 15, 2026
- Medium5.3Authorization Bypass Through User-Controlled Key vulnerability in VillaTheme COMPE compe-woo-compare-products allows Exploiting Incorrectly Configured Access Control S…Check if you run itEPSS 0.22%Apr 15, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Zahlan Categories Images categories-images allows DOM-Based XSS.T…Check if you run itEPSS 0.14%Apr 15, 2026
- Medium5.3Missing Authorization vulnerability in ThemeGrill ThemeGrill Demo Importer themegrill-demo-importer allows Exploiting Incorrectly Configured Access Control Security Le…Check if you run itEPSS 0.20%Apr 15, 2026
Sort