Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.62%Apr 14, 2026
- Medium4.4The WholeSale Products Dynamic Pricing Management WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and includCheck if you run itEPSS 0.16%Apr 14, 2026
- Medium6.4The ShopLentor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the woolentor_quickview_button shortcode's button_text attribute in all versions up to, and incCheck if you run itEPSS 0.30%Apr 14, 2026
- Medium6.4The Surbma | Booking.com Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode in all versions up to, and including, 2.1 due to insCheck if you run itEPSS 0.16%Apr 14, 2026
- High7.1External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets.Check if you run itEPSS 0.27%Apr 14, 2026
- High8.4PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.25%Apr 14, 2026
- High7.2PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.30%Apr 14, 2026
- High7.2The Form Maker by 10Web plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Matrix field (Text Box input type) in form submissions in all versions up to, andCheck if you run itEPSS 0.25%Apr 14, 2026
- High7.2The BackWPup plugin for WordPress is vulnerable to Local File Inclusion via the parameter of the REST endpoint in all versions up to, and including, 5.6.6 due to a non-recursive saCheck if you run itEPSS 1.33%Apr 14, 2026
- Medium5.1MaxKB is an open-source AI assistant for enterprise.Check if you run itEPSS 0.18%Apr 14, 2026
- Medium4.3Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Check if you run itEPSS 0.30%Apr 14, 2026
- Critical9.8A critical vulnerability in the Talend JobServer and Talend Runtime allows unauthenticated remote code execution via the JMX monitoring port.Check if you run itEPSS 0.75%Apr 14, 2026
- Medium5.1MaxKB is an open-source AI assistant for enterprise.Check if you run itEPSS 0.20%Apr 14, 2026
- High7.5The JetEngine plugin for WordPress is vulnerable to SQL Injection via the Custom Content Type (CCT) REST API search endpoint in all versions up to, and including, 3.8.6.1.Check if you run itEPSS 0.37%Apr 14, 2026
- Critical9.1The LearnPress plugin for WordPress is vulnerable to unauthorized data deletion due to a missing capability check on the function in all versions up to, and including, 4.3.2.8.Check if you run itEPSS 0.88%Apr 14, 2026
- Medium6.9MaxKB is an open-source AI assistant for enterprise.Check if you run itEPSS 0.18%Apr 14, 2026
- High7.4MaxKB is an open-source AI assistant for enterprise.Check if you run itEPSS 0.27%Apr 14, 2026
- High7.4MaxKB is an open-source AI assistant for enterprise.Check if you run itEPSS 0.20%Apr 14, 2026
- Medium4.3Information Disclosure Vulnerability in SAP HANA Cockpit and HANA Database ExplorerCheck if you run itEPSS 0.31%Apr 14, 2026
- Low3.1MaxKB is an open-source AI assistant for enterprise.Check if you run itEPSS 0.23%Apr 14, 2026
- Medium5.3MaxKB is an open-source AI assistant for enterprise.Check if you run itEPSS 0.37%Apr 14, 2026
- Medium6.9MaxKB is an open-source AI assistant for enterprise.Check if you run itEPSS 0.22%Apr 14, 2026
- Medium5.3nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm.Check if you run itEPSS 0.31%Apr 14, 2026
- Low2.9jq is a command-line JSON processor.Check if you run itEPSS 0.27%Apr 14, 2026
- Medium6.1Due to a Code Injection vulnerability in SAP NetWeaver Application Server Java (Web Dynpro Java), an unauthenticated attacker could supply crafted input that is interp…Check if you run itEPSS 0.20%Apr 14, 2026
Sort