Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.4OS Command Injection Remote Code Execution Vulnerability in API in Progress LoadMaster allows an authenticated attacker with “User Administration” permissions to execute arbitraryCheck this weekEPSS 27.22%Jan 13, 2026
- High8.1Zohocorp ManageEngine PAM360 versions before 8202; Password Manager Pro versions before 13221; Access Manager Plus versions prior to 4401 are vulnerable to an authorization issue iCheck if you run itEPSS 0.79%Jan 13, 2026
- Medium5.3The EventPrime - Events Calendar, Bookings and Tickets plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.2.7.0 via the RECheck if you run itEPSS 0.42%Jan 13, 2026
- Medium4.3The CP Image Store with Slideshow plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.9 due to a logic error in the 'cpis_admin_iniCheck if you run itEPSS 0.29%Jan 13, 2026
- High8.4Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Lemonsoft WordPress add on allows Cross-Site Scripting (XSS).This issueCheck if you run itEPSS 0.36%Jan 13, 2026
- Critical9.1Zohocorp ManageEngine ADSelfService Plus versions before 6519 are vulnerable to Authentication Bypass due to improper filter configurations.Check if you run itEPSS 1.55%Jan 13, 2026
- Critical9.8Memory safety bugs present in Firefox 146 and Thunderbird 146.Check if you run itEPSS 0.45%Jan 13, 2026
- High8.1Memory safety bugs present in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146.Check if you run itEPSS 0.47%Jan 13, 2026
- Medium5.4Spoofing issue in the DOM: Copy & Paste and Drag & Drop component.Check if you run itEPSS 0.30%Jan 13, 2026
- High7.5Denial-of-service in the DOM: Service Workers component.Check if you run itEPSS 0.46%Jan 13, 2026
- Medium5.3Information disclosure in the XML component.Check if you run itEPSS 0.35%Jan 13, 2026
- Medium4.3Clickjacking issue, information disclosure in the PDF Viewer component.Check if you run itEPSS 0.33%Jan 13, 2026
- Medium5.3Incorrect boundary conditions in the Graphics component.Check if you run itEPSS 0.38%Jan 13, 2026
- Medium6.5Use-after-free in the JavaScript: GC component.Check if you run itEPSS 0.40%Jan 13, 2026
- Critical9.8Use-after-free in the JavaScript Engine component.Check if you run itEPSS 0.46%Jan 13, 2026
- Medium5.3Information disclosure in the Networking component.Check if you run itEPSS 0.36%Jan 13, 2026
- High8.8Use-after-free in the IPC component.Check if you run itEPSS 0.46%Jan 13, 2026
- Critical10.0Sandbox escape in the Messaging System component.Check if you run itEPSS 0.35%Jan 13, 2026
- High8.8Sandbox escape due to integer overflow in the Graphics component.Check if you run itEPSS 0.54%Jan 13, 2026
- Critical9.8Sandbox escape due to incorrect boundary conditions in the Graphics component.Check if you run itEPSS 0.50%Jan 13, 2026
- High8.0Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component.Check if you run itEPSS 0.47%Jan 13, 2026
- High8.1Mitigation bypass in the DOM: Security component.Check if you run itEPSS 0.47%Jan 13, 2026
- Medium5.5Zohocorp ManageEngine ADManager Plus versions below 7230 are vulnerable to Path Traversal in the User Management moduleCheck if you run itEPSS 0.59%Jan 13, 2026
- High8.8A vulnerability exists in Progress Flowmon ADS versions prior to 12.5.4 and 13.0.1 where an SQL injection vulnerability allows authenticated users to execute unintended SQL queriesCheck if you run itEPSS 0.46%Jan 13, 2026
- Medium5.2TYPO3's mail‑file spool deserialization flaw lets local users with write access to the spool directory craft a malicious file that is deserialized during the mailer:spool:send commCheck if you run itEPSS 0.18%Jan 13, 2026
Sort