Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.4A container privilege escalation flaw was found in certain OpenShift Update Service (OSUS) images.Check if you run itEPSS 0.15%Apr 8, 2026
- Medium6.4A container privilege escalation flaw was found in certain Web Terminal images.Check if you run itEPSS 0.16%Apr 8, 2026
- Medium6.7A container privilege escalation flaw was found in certain Multicluster Engine for Kubernetes images.Check if you run itEPSS 0.12%Apr 8, 2026
- Critical9.3Cleartext Storage of Sensitive Information in GUI vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions…Check if you run itEPSS 0.10%Apr 8, 2026
- Critical9.3Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.…Check if you run itEPSS 0.10%Apr 8, 2026
- Medium6.4A container privilege escalation flaw was found in certain Red Hat Process Automation Manager images.Check if you run itEPSS 0.15%Apr 8, 2026
- Medium6.4A container privilege escalation flaw was found in certain Ansible Automation Platform images.Check if you run itEPSS 0.19%Apr 8, 2026
- High7.4In Eclipse Jetty, the class JASPIAuthenticator initiates the authentication checks, which set two ThreadLocal variable.Check if you run itEPSS 0.54%Apr 8, 2026
- Medium6.4The Page Builder: Pagelayer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Button widget's Custom Attributes field in all versions up to, and including,Check if you run itEPSS 0.35%Apr 8, 2026
- Medium5.5A new API endpoint introduced in pretix 2025 that is supposed to return all check-in events of a specific event in fact returns all check-in events belonging to the re…Check if you run itEPSS 0.26%Apr 8, 2026
- Medium6.1Stored XSS in log viewer in CoolerControl/coolercontrol-ui <4.0.0 allows unauthenticated attackers to take over the service via malicious JavaScript in poisoned log entriesCheck if you run itEPSS 0.28%Apr 8, 2026
- Medium4.4Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.1.6 and versions 9.11.0.0 through 9.13.0.0, contains a generation of error message containing sensitive informatio…Check if you run itEPSS 0.16%Apr 8, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: atm: fix crash due to unvalidated vcc pointer in sigd_send() Reproducer available at [1].Check if you run itEPSS 0.13%Apr 8, 2026
- Medium5.3Wimi Teamwork On-Premises versions prior to 8.2.0 contain an insecure direct object reference vulnerability in the preview.php endpoint where the item_id parameter lacks proper autCheck if you run itEPSS 0.18%Apr 8, 2026
- High7.8Dell Elastic Cloud Storage, version 3.8.1.7 and prior, and Dell ObjectScale, versions prior to 4.1.0.3 and version 4.2.0.0, contains an Insertion of Sensitive Information into LogCheck if you run itEPSS 0.11%Apr 8, 2026
- High7.8Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.1.6 and versions 9.11.0.0 through 9.13.0.1, contains an incorrect privilege assignment vulnerability.Check if you run itEPSS 0.09%Apr 8, 2026
- High8.1CORS misconfiguration in CoolerControl/coolercontrold <4.0.0 allows unauthenticated remote attackers to read data and send commands to the service via malicious websitesCheck if you run itEPSS 0.27%Apr 8, 2026
- Critical9.1Unauthenticated functionality in CoolerControl/coolercontrold <4.0.0 allows unauthenticated attackers to view and modify potentially sensitive data via HTTP requestsCheck if you run itEPSS 0.22%Apr 8, 2026
- High8.2Command injection in alerts in CoolerControl/coolercontrold <4.0.0 allows authenticated attackers to execute arbitrary code as root via injected bash commands in alert namesCheck if you run itEPSS 0.99%Apr 8, 2026
- Medium5.5Dell PowerProtect Agent Service, version(s) prior to 20.1, contain(s) an Incorrect Permission Assignment for Critical Resource vulnerability.Check if you run itEPSS 0.13%Apr 8, 2026
- High7.5WCAPF – WooCommerce Ajax Product Filter plugin is vulnerable to time-based SQL Injection via the 'post-author' parameter in all versions up to, and including, 4.2.3 due to insufficCheck if you run itEPSS 1.47%Apr 8, 2026
- Medium6.4The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'settings[js]' parameter in versions up toCheck if you run itEPSS 0.27%Apr 8, 2026
- Medium6.5The BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, andCheck if you run itEPSS 0.18%Apr 8, 2026
- High8.8The Advanced Members for ACF plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the create_crop function in all versions up tCheck if you run itEPSS 0.82%Apr 8, 2026
- Medium4.3The BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, andCheck if you run itEPSS 0.16%Apr 8, 2026
Sort