Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8In the Linux kernel, the following vulnerability has been resolved: usb: phy: isp1301: fix non-OF device reference imbalance A recent change fixing a device reference leak in a UDCCheck if you run itEPSS 0.17%Jan 23, 2026
- Medium4.3The weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot plugin for WordPress is vulnerable to unauthorized modification or loss of data due to a missing capabCheck if you run itEPSS 0.29%Jan 23, 2026
- Medium6.4The WP DSGVO Tools (GDPR) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'lw_content_block' shortcode in all versions up to, and including, 3.1.Check if you run itEPSS 0.27%Jan 23, 2026
- High8.8The Melapress Role Editor plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.1.1.Check if you run itEPSS 0.40%Jan 23, 2026
- Critical9.3SmarterTools SmarterMail Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 88.18%Jan 23, 2026
- High8.8Dell ECS, versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.2.0.0, contains an Use of Default Credentials vulnerability in the OS.Check if you run itEPSS 0.36%Jan 23, 2026
- High7.5Dell ECS, versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.2.0.0, contains a Cleartext Transmission of Sensitive Information vulnerability.Check if you run itEPSS 0.21%Jan 23, 2026
- Low2.9In libexpat before 2.7.4, XML_ExternalEntityParserCreate does not copy unknown encoding handler user data.Check if you run itEPSS 0.20%Jan 23, 2026
- High7.3The The BuddyPress plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 14.3.3.Check if you run itEPSS 0.58%Jan 23, 2026
- Medium6.4The RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wp-rss-aggregator' sCheck if you run itEPSS 0.25%Jan 23, 2026
- Medium6.4The Schema & Structured Data for WP & AMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'saswp_custom_schema_field' profile field in all versions up to,Check if you run itEPSS 0.26%Jan 23, 2026
- Medium5.3The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to arbitrary file uploads due to missing authorization checks in the uploadMedicalReport(Check if you run itEPSS 0.33%Jan 23, 2026
- High8.8A flaw was found in Moodle.Check if you run itEPSS 0.57%Jan 23, 2026
- Medium6.4The Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the automator_discordCheck if you run itEPSS 0.28%Jan 23, 2026
- High7.3Discord Client Uncontrolled Search Path Element Local Privilege Escalation Vulnerability.Check if you run itEPSS 0.38%Jan 23, 2026
- High7.0npm cli Incorrect Permission Assignment Local Privilege Escalation Vulnerability.Check if you run itEPSS 0.29%Jan 23, 2026
- High7.5Langflow Disk Cache Deserialization of Untrusted Data Remote Code Execution Vulnerability.Check if you run itEPSS 1.24%Jan 23, 2026
- High7.1Langflow PythonFunction Code Injection Remote Code Execution Vulnerability.Check if you run itEPSS 0.63%Jan 23, 2026
- Critical9.8Langflow Langflow Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')Patch nowKEVEPSS 41.15%Jan 23, 2026
- Critical9.8Langflow Langflow Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 28.05%Jan 23, 2026
- High7.8GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.Check if you run itEPSS 0.84%Jan 23, 2026
- High7.07-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability.Check if you run itEPSS 0.53%Jan 23, 2026
- Critical9.9Improper access control in Azure Resource Manager allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.67%Jan 23, 2026
- High7.8An OS command injection vulnerability in the com.sprd.engineermode component in Doogee Note59, Note59 Pro, and Note59 Pro+ allows a local attacker to execute arbitrary code and escCheck if you run itEPSS 0.91%Jan 23, 2026
- High7.5An information disclosure vulnerability exists in the /srvs/membersrv/getCashiers endpoint of the Aptsys gemscms backend platform thru 2025-05-28.Check if you run itEPSS 0.30%Jan 23, 2026
Sort