Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownscriptsbundle adforest Weak Password Recovery Mechanism for Forgotten PasswordPatch nowKEVEPSS 0.72%May 5, 2026
- Unknownscriptsbundle adforest Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 1.22%May 5, 2026
- Unknownweb-shop-host startklar_elmentor_addons Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 1.52%May 4, 2026
- Unknowncontempothemes real_estate_7 Incorrect Privilege AssignmentPatch nowKEVEPSS 0.78%May 4, 2026
- Unknown10web photo_gallery Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 43.35%May 4, 2026
- Unknownupdraftplus updraftplus Incorrect AuthorizationPatch nowKEVEPSS 2.07%May 4, 2026
- Medium6.5During the analysis, it was identified that authenticated attackers with Subscriber-level access or higher are able to perform an Insecure Direct Object Reference (IDOR) attack.Check if you run itEPSS 0.34%May 3, 2026
- Medium5.3Starlet versions through 0.31 for Perl allows HTTP Request Smuggling via Improper Header Precedence.Check if you run itEPSS 0.43%May 3, 2026
- Medium6.4The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the className, classHo…Check if you run itEPSS 0.42%May 2, 2026
- Medium6.1Cross-Site Scripting (XSS) vulnerability was discovered in the GSVoIP web panel version 2.0.90.Check if you run itEPSS 0.35%May 1, 2026
- High8.6Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005.Check if you run itEPSS 0.60%May 1, 2026
- High8.8Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005.Check if you run itEPSS 0.70%May 1, 2026
- Critical10.0Buffer overflow vulnerability in Open Vehicle Monitoring System 3 (OVMS3) 3.3.005.Check if you run itEPSS 1.11%May 1, 2026
- High7.5An issue was discovered in Vanetza V2X v26.02 allowing remote unauthorized attackers to cause a denial of service.Check if you run itEPSS 0.63%May 1, 2026
- High7.0In the Linux kernel, the following vulnerability has been resolved: atm: lec: fix use-after-free in sock_def_readable() A race condition exists between lec_atm_close()…Check if you run itEPSS 0.16%May 1, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: mshv: Fix error handling in mshv_region_pin The current error handling has two issues: First, pin_u…Check if you run itEPSS 0.16%May 1, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak __radix_tree_create() all…Check if you run itEPSS 0.16%May 1, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_helper: pass helper to expect cleanup nf_conntrack_helper_unregister() call…Check if you run itEPSS 0.13%May 1, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: macb: properly unregister fixed rate clocks The additional resources allocated with clk_regist…Check if you run itEPSS 0.16%May 1, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: gpio: qixis-fpga: Fix error handling for devm_regmap_init_mmio() devm_regmap_init_mmio() returns an…Check if you run itEPSS 0.14%May 1, 2026
- High7.1Two heap-based out-of-bounds read vulnerabilities in the STL ASCII file parser in Open CASCADE Technology (OCCT) V8_0_0_rc5 exist in RWStl_Reader::ReadAscii because bu…Check if you run itEPSS 0.14%May 1, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: ALSA: ctxfi: Fix missing SPDIFI1 index handling SPDIF1 DAIO type isn't properly handled in daio_dev…Check if you run itEPSS 0.17%May 1, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ALSA: ctxfi: Don't enumerate SPDIF1 at DAIO initialization The recent refactoring of xfi driver cha…Check if you run itEPSS 0.14%May 1, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: iio: gyro: mpu3050: Fix irq resource leak The interrupt handler is setup but only a few lines down…Check if you run itEPSS 0.16%May 1, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: usb: misc: usbio: Fix URB memory leak on submit failure When usb_submit_urb() fails in usbio_probe(…Check if you run itEPSS 0.16%May 1, 2026