Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Due to the improper neutralisation of special elements used in an OS command, a remote attacker can exploit an RCE vulnerability in the generateSrpArray function, resulting in fullCheck if you run itEPSS 0.52%Apr 2, 2026
- Medium5.3SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to inject HTML into notification emails about new CA certificates.Check if you run itEPSS 0.10%Apr 2, 2026
- High7.8SEPPmail Secure Email Gateway before version 15.0.3 allows account takeover by abusing GINA account initialization to reset a victim account password.Check if you run itEPSS 0.28%Apr 2, 2026
- High7.8SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to bypass subject sanitization and forge security tags using Unicode lookalike characters.Check if you run itEPSS 0.22%Apr 2, 2026
- High7.8SEPPmail Secure Email Gateway before version 15.0.3 does not properly authenticate the inner message of S/MIME-encrypted MIME entities, allowing an attacker to control trusted headCheck if you run itEPSS 0.25%Apr 2, 2026
- High7.8Code execution in AssistFeedbackService of TECNO Pova7 Pro 5G on Android allows local apps to execute arbitrary code as system via command injection.Check if you run itEPSS 0.53%Apr 2, 2026
- Medium6.3SEPPmail Secure Email Gateway before version 15.0.3 allows attackers with a specially crafted email address to claim another user's PGP signature as their own.Check if you run itEPSS 0.22%Apr 2, 2026
- Medium4.9SEPPmail Secure Email Gateway before version 15.0.3 allows attackers with a specially crafted email address to read the contents of emails encrypted for other users.Check if you run itEPSS 0.23%Apr 2, 2026
- Medium6.3SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to forge a GINA-encrypted email.Check if you run itEPSS 0.13%Apr 2, 2026
- Medium5.3SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to hide security tags from users by crafting a long subject.Check if you run itEPSS 0.19%Apr 2, 2026
- High7.7SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to bypass subject sanitization and forge tags such as [signed OK].Check if you run itEPSS 0.22%Apr 2, 2026
- Medium5.3SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to craft a password-tag that bypasses subject sanitization.Check if you run itEPSS 0.26%Apr 2, 2026
- Medium5.3SEPPmail Secure Email Gateway before version 15.0.3 allows an external user to modify GINA webdomain metadata and bypass per-domain restrictions.Check if you run itEPSS 0.23%Apr 2, 2026
- High7.7SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to cause attacker-controlled certificates to be used for future encryption to a victim by adding the certificCheck if you run itEPSS 0.12%Apr 2, 2026
- Medium5.3SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to upload PGP keys with UIDs that do not match their email address.Check if you run itEPSS 0.24%Apr 2, 2026
- Medium6.3SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker with access to a victim's GINA account to bypass a second-password check and read protected emails.Check if you run itEPSS 0.26%Apr 2, 2026
- Medium6.4The Webmention plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.6.2 via the 'Tools::read' function.Check if you run itEPSS 0.21%Apr 2, 2026
- Medium6.9A vulnerability has been found in Cesanta Mongoose up to 7.20.Check if you run itEPSS 0.76%Apr 2, 2026
- High7.5The W3 Total Cache plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 2.9.3.Check if you run itEPSS 3.21%Apr 2, 2026
- High7.2The Webmention plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.6.2 in the 'MF2::parse_authorpage' function via the 'ReceivCheck if you run itEPSS 0.31%Apr 2, 2026
- Medium5.1A vulnerability was determined in SourceCodester Simple Customer Relationship Management System 1.0.Check if you run itEPSS 0.20%Apr 2, 2026
- Medium4.8A vulnerability was found in priyankark a11y-mcp up to 1.0.5.Check if you run itEPSS 0.13%Apr 2, 2026
- High7.2The Spam Protect for Contact Form 7 WordPress plugin before 1.2.10 allows logging to a PHP file, which could allow an attacker with editor access to achieve Remote Code Execution bCheck if you run itEPSS 0.66%Apr 2, 2026
- Medium6.9A vulnerability has been found in AlejandroArciniegas mcp-data-vis bc597e391f184d2187062fd567599a3cb72adf51/de5a51525a69822290eaee569a1ab447b490746d.Check if you run itEPSS 0.26%Apr 2, 2026
- High8.1The MW WP Form plugin for WordPress is vulnerable to arbitrary file moving due to insufficient file path validation via the 'generate_user_filepath' function and the 'move_temp_filCheck if you run itEPSS 1.29%Apr 2, 2026
Sort