Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3A flaw has been found in Flycatcher Toys smART Sketcher up to 2.0.Check if you run itEPSS 0.57%Jan 11, 2026
- High8.7A vulnerability was detected in UTT 进取 520W 1.7.7-180627.Check if you run itEPSS 3.87%Jan 11, 2026
- High8.7A security vulnerability has been detected in UTT 进取 520W 1.7.7-180627.Check if you run itEPSS 4.08%Jan 11, 2026
- High8.7A weakness has been identified in UTT 进取 520W 1.7.7-180627.Check if you run itEPSS 1.08%Jan 11, 2026
- High8.7A security flaw has been discovered in UTT 进取 520W 1.7.7-180627.Check if you run itEPSS 3.87%Jan 11, 2026
- High8.7A vulnerability was identified in UTT 进取 520W 1.7.7-180627.Check if you run itEPSS 3.87%Jan 11, 2026
- High8.7A vulnerability was determined in UTT 进取 520W 1.7.7-180627.Check if you run itEPSS 0.85%Jan 11, 2026
- Medium4.8A vulnerability was found in Luxul XWR-600 up to 4.0.1.Check if you run itEPSS 0.25%Jan 11, 2026
- Medium5.1A security flaw has been discovered in questdb ui up to 1.11.9.Check if you run itEPSS 0.29%Jan 10, 2026
- Medium4.3The Featured Image from URL (FIFU) plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.3.1.Check if you run itEPSS 0.26%Jan 10, 2026
- Medium6.4The Shortcodes and extra features for Phlox theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a combination of the 'tag' and ‘title_tag’ parameters in allCheck if you run itEPSS 0.22%Jan 10, 2026
- Medium5.3A vulnerability was identified in quickjs-ng quickjs up to 0.11.0.Check if you run itEPSS 0.46%Jan 10, 2026
- Medium6.9A vulnerability was determined in quickjs-ng quickjs up to 0.11.0.Check if you run itEPSS 0.52%Jan 10, 2026
- Medium6.4The Countdown Timer – Widget Countdown plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpdevart_countdown' shortcode in all versions up to, andCheck if you run itEPSS 0.22%Jan 10, 2026
- Medium4.8A security flaw has been discovered in lief-project LIEF up to 0.17.1.Check if you run itEPSS 0.27%Jan 10, 2026
- Medium6.4The ConvertForce Popup Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Gutenberg block's attribute in all versions up to, and including, 0.0.7.Check if you run itEPSS 0.22%Jan 10, 2026
- High7.5J2EE Misconfiguration: Data Transmission Without Encryption vulnerability in Apache NimBLE.Check if you run itEPSS 0.24%Jan 10, 2026
- Low3.1Out-of-bounds Read vulnerability in Apache NimBLE HCI H4 driver.Check if you run itEPSS 0.35%Jan 10, 2026
- High7.5NULL Pointer Dereference vulnerability in Apache Nimble.Check if you run itEPSS 0.81%Jan 10, 2026
- High8.1Authentication Bypass by Spoofing vulnerability in Apache NimBLE.Check if you run itEPSS 0.38%Jan 10, 2026
- Medium6.9Sangfor operation_and_maintenance_security_management_system Improper Access ControlPatch nowKEVEPSS 2.04%Jan 10, 2026
- Medium5.4The User Registration & Membership – Custom Registration Form Builder, Custom Login Form, User Profile, Content Restriction & Membership Plugin plugin for WordPress is vulnerable tCheck if you run itEPSS 0.15%Jan 10, 2026
- Medium6.9A vulnerability was identified in Sangfor Operation and Maintenance Management System up to 3.0.8.Check if you run itEPSS 6.05%Jan 10, 2026
- Medium5.3The miniOrange OTP Verification and SMS Notification for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on thCheck if you run itEPSS 0.27%Jan 10, 2026
- High7.5ComfyUI-Manager is an extension designed to enhance the usability of ComfyUI.Check if you run itEPSS 0.87%Jan 10, 2026
Sort