Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in highwarden Super Interactive Maps super-interactive-maps allows Reflected XSS.Check if you run itEPSS 0.29%Jan 22, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Magic Responsive Slider and Carousel WordPress magic_carousel allCheck if you run itEPSS 0.29%Jan 22, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Magic Slider magic_slider allows Reflected XSS.This issue affectsCheck if you run itEPSS 0.29%Jan 22, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup Image&Video FullScreen Background lbg_fullscreen_fullwidth_sliderCheck if you run itEPSS 0.30%Jan 22, 2026
- Medium5.3Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in xtemos WoodMart woodmart allows Code Injection.This issue affects WoodMart: from n/aCheck if you run itEPSS 0.37%Jan 22, 2026
- Low3.8Authorization Bypass Through User-Controlled Key vulnerability in Themeum Tutor LMS tutor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affectsCheck if you run itEPSS 0.33%Jan 22, 2026
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Benjamin Intal Stackable stackable-ultimate-gutenberg-blocks allows Stored XSSCheck if you run itEPSS 0.29%Jan 22, 2026
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Ninetheme Anarkali anarkali allows PHP Local File InclusionCheck if you run itEPSS 0.63%Jan 22, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup HTML5 Video Player with Playlist & Multiple Skins lbg-vp2-html5-rCheck if you run itEPSS 0.30%Jan 22, 2026
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in bdthemes Element Pack Elementor Addons bdthemes-element-pack-lite allows Cross Site Request Forgery.This issue affects Element PaCheck if you run itEPSS 0.16%Jan 22, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup HTML5 Video Player lbg-vp2-html5-bottom allows Reflected XSS.ThisCheck if you run itEPSS 0.22%Jan 22, 2026
- Medium6.9VB-Audio Voicemeeter, Voicemeeter Banana, and Voicemeeter Potato (versions ending in 1.1.1.9, 2.1.1.9, and 3.1.1.9 and earlier, respectively), as well as VB-Audio Matrix and MatrixCheck if you run itEPSS 0.18%Jan 22, 2026
- Medium6.9VB-Audio Voicemeeter, Voicemeeter Banana, and Voicemeeter Potato (versions ending in 1.1.1.9, 2.1.1.9, and 3.1.1.9 and earlier, respectively), as well as VB-Audio Matrix and MatrixCheck if you run itEPSS 0.20%Jan 22, 2026
- High8.5VB-Audio Matrix and Matrix Coconut (versions ending in 1.0.2.2 and 2.0.2.2 and earlier, respectively), contain a local privilege escalation vulnerability in the VBMatrix VAIO virtuCheck if you run itEPSS 0.16%Jan 22, 2026
- Medium6.8VB-Audio Voicemeeter, Voicemeeter Banana, and Voicemeeter Potato (versions ending in 1.1.1.9, 2.1.1.9, and 3.1.1.9 and earlier, respectively), as well as VB-Audio Matrix and MatrixCheck if you run itEPSS 0.15%Jan 22, 2026
- High8.1Dell PowerScale OneFS versions prior to 9.13.0.0 contains an improper restriction of excessive authentication attempts vulnerability.Check if you run itEPSS 0.40%Jan 22, 2026
- High8.8Dell Unisphere for PowerMax, version(s) 10.2.0.x, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability.Check if you run itEPSS 0.67%Jan 22, 2026
- High8.7A flaw has been found in Tenda AX1803 1.0.0.1.Check if you run itEPSS 1.20%Jan 22, 2026
- High8.7A vulnerability was detected in Totolink NR1800X 9.1.0u.6279_B20210910.Check if you run itEPSS 0.84%Jan 22, 2026
- Medium5.3A security vulnerability has been detected in Totolink NR1800X 9.1.0u.6279_B20210910.Check if you run itEPSS 2.87%Jan 22, 2026
- High7.4GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 18.6.4, 18.7 before 18.7.2, and 18.8 before 18.8.2 that could have allowed an individual withCheck if you run itEPSS 1.04%Jan 22, 2026
- Medium5.3A weakness has been identified in Totolink NR1800X 9.1.0u.6279_B20210910.Check if you run itEPSS 3.49%Jan 22, 2026
- Medium6.9A security flaw has been discovered in Sangfor Operation and Maintenance Security Management System up to 3.0.12.Check if you run itEPSS 0.57%Jan 22, 2026
- High8.7A vulnerability was identified in Sangfor Operation and Maintenance Management System up to 3.0.12.Check if you run itEPSS 6.98%Jan 22, 2026
- High8.1Unrestricted Upload of File with Dangerous Type vulnerability in Solvera Software Services Trade Inc.Check if you run itEPSS 0.35%Jan 22, 2026
Sort