Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.3Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Distribution Lists report.Check if you run itEPSS 0.55%Apr 3, 2026
- High8.1The Perfmatters plugin for WordPress is vulnerable to arbitrary file deletion via path traversal in all versions up to, and including, 2.5.9.1.Check if you run itEPSS 0.67%Apr 3, 2026
- Medium5.6Incorrect Default Permissions vulnerability in AIRBUS PSS TETRA Connectivity Server on Windows Server OS allows Privilege Abuse.Check if you run itEPSS 0.14%Apr 3, 2026
- Medium4.8A vulnerability was identified in Wahoo Fitness SYSTM App up to 7.2.1 on Android.Check if you run itEPSS 0.16%Apr 3, 2026
- Medium4.8A weakness has been identified in Noelse Individuals & Pro App up to 2.1.7 on Android.Check if you run itEPSS 0.15%Apr 3, 2026
- Medium4.8A security flaw has been discovered in PropertyGuru AgentNet Singapore App up to 23.7.10 on Android.Check if you run itEPSS 0.15%Apr 3, 2026
- Medium4.8A vulnerability was identified in Align Technology My Invisalign App 3.12.4 on Android.Check if you run itEPSS 0.11%Apr 3, 2026
- Medium4.8A vulnerability was determined in Dialogue App up to 4.3.2 on Android.Check if you run itEPSS 0.11%Apr 3, 2026
- Medium6.5An issue was discovered in MariaDB Server before 11.4.10, 11.5.x through 11.8.x before 11.8.6, and 12.x before 12.2.2.Check if you run itEPSS 0.27%Apr 3, 2026
- Medium4.8A vulnerability was found in GRID Organiser App up to 1.0.5 on Android.Check if you run itEPSS 0.15%Apr 3, 2026
- Critical9.3Command injection vulnerability in console.run_module_with_output() in pymetasploit3 through version 1.0.6 allows attackers to inject newline characters into module options such asCheck if you run itEPSS 2.15%Apr 3, 2026
- Medium4.8A vulnerability has been found in Rico só vantagem pra investir App up to 4.58.32.12421 on Android.Check if you run itEPSS 0.15%Apr 3, 2026
- High8.2An issue was discovered in Roundcube Webmail before 1.5.15 and 1.6.15.Check if you run itEPSS 0.41%Apr 3, 2026
- Medium5.3An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14.Check if you run itEPSS 0.38%Apr 3, 2026
- Medium5.3An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14.Check if you run itEPSS 0.42%Apr 3, 2026
- Medium5.3An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14.Check if you run itEPSS 0.42%Apr 3, 2026
- Medium4.2An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14.Check if you run itEPSS 0.25%Apr 3, 2026
- Medium6.5An issue was discovered in Roundcube Webmail 1.6.0 before 1.6.14.Check if you run itEPSS 0.40%Apr 3, 2026
- Medium6.1An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14.Check if you run itEPSS 0.26%Apr 3, 2026
- Low3.1An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14.Check if you run itEPSS 0.43%Apr 3, 2026
- High7.5An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14.Check if you run itEPSS 0.48%Apr 3, 2026
- Medium4.8A flaw has been found in UCC CampusConnect App up to 14.3.5 on Android.Check if you run itEPSS 0.15%Apr 3, 2026
- High7.2In Tornado before 6.5.5, cookie attribute injection could occur because the domain, path, and samesite arguments to .RequestHandler.set_cookie were not checked for crafted characteCheck if you run itEPSS 0.25%Apr 3, 2026
- High7.8In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to pCheck if you run itEPSS 0.18%Apr 3, 2026
- High7.5A remote attacker can supply a short X-Wing HPKE encapsulated key and trigger an out-of-bounds read in the C decapsulation path, potentially causing a crash or memory disclosure deCheck if you run itEPSS 0.49%Apr 3, 2026
Sort