Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.3A flaw was found in Moodle.Check if you run itEPSS 0.26%Feb 3, 2026
- High8.1A flaw was found in Moodle.Check if you run itEPSS 0.41%Feb 3, 2026
- High7.6Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Seres Software syWEB allows Reflected XSS.Check if you run itEPSS 0.21%Feb 3, 2026
- High8.8The OS DataHub Maps plugin for WordPress is vulnerable to arbitrary file uploads due to incorrect file type validation in the 'OS_DataHub_Maps_Admin::add_file_and_ext' function inCheck if you run itEPSS 0.62%Feb 3, 2026
- High8.1The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object References (IDOR) in all versions up to, and including, 3.9.5.Check if you run itEPSS 0.38%Feb 3, 2026
- Medium5.3The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.9.5.Check if you run itEPSS 0.34%Feb 3, 2026
- High7.5Exposure of Sensitive Information to an Unauthorized Actor vulnerability in AKCE Software Technology R&D Industry and Trade Inc.Check if you run itEPSS 0.37%Feb 3, 2026
- High7.6Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in AKCE Software Technology R&D Industry and Trade Inc.Check if you run itEPSS 0.29%Feb 3, 2026
- High8.6OS command injection vulnerability exists in ELECOM wireless LAN products.Check if you run itEPSS 1.85%Feb 3, 2026
- Medium5.1Cross-site request forgery vulnerability exists in ELECOM wireless LAN products.Check if you run itEPSS 0.15%Feb 3, 2026
- Medium5.4The Mail Mint plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.19.2.Check if you run itEPSS 0.18%Feb 3, 2026
- High7.1The Form Maker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via hidden field values in all versions up to, and including, 1.15.35.Check if you run itEPSS 0.36%Feb 3, 2026
- Medium6.4The Happy Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '_elementor_data' meta field in all versions up to, and including, 3.20.7 dCheck if you run itEPSS 0.34%Feb 3, 2026
- High7.2The Form Maker by 10Web plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.15.35.Check if you run itEPSS 0.38%Feb 3, 2026
- High7.2The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the customer profile fields in all versionCheck if you run itEPSS 0.40%Feb 3, 2026
- Medium5.3The Spectra Gutenberg Blocks – Website Builder for the Block Editor plugin for WordPress is vulnerable to Information Disclosure in all versions up to, and including, 2.19.17.Check if you run itEPSS 0.41%Feb 3, 2026
- Medium5.4The Unlimited Elements for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Border Hero widget's Button Link field in versions up to 2.0.1.Check if you run itEPSS 0.20%Feb 3, 2026
- High8.5A vulnerability in Brocade Fabric OS before 9.2.1c3 could allow elevating the privileges of the local authenticated user to “root” using the export option of seccertmgmt and seccryCheck if you run itEPSS 0.14%Feb 3, 2026
- High8.2A vulnerability in Brocade Fabric OS could allow an authenticated, local attacker with privileges to access the Bash shell to access insecurely stored file contents including the hCheck if you run itEPSS 0.22%Feb 3, 2026
- High8.4A vulnerability in Brocade Fabric OS versions before 9.2.1c2 could allow an administrator-level user to execute the bind command, to escalate privileges and bypass security controlCheck if you run itEPSS 0.54%Feb 3, 2026
- High8.5A vulnerability in the secure configuration of authentication and management services in Brocade Fabric OS before Fabric OS 9.2.1c2 could allow an authenticated, remote attacker wiCheck if you run itEPSS 0.64%Feb 3, 2026
- Low1.7Vulnerability in Wikimedia Foundation Scribunto, Wikimedia Foundation luasandbox.Check if you run itEPSS 0.33%Feb 3, 2026
- UnknownVulnerability in Wikimedia Foundation MediaWiki.Check if you run itEPSS 0.44%Feb 3, 2026
- UnknownVulnerability in Wikimedia Foundation MediaWiki.Check if you run itEPSS 0.25%Feb 3, 2026
- Low1.3Vulnerability in Wikimedia Foundation MediaWiki.Check if you run itEPSS 0.29%Feb 3, 2026
Sort