Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9NetAware 1.20 contains a buffer overflow vulnerability in the Share Name field that allows local attackers to crash the application by supplying an excessively long string.Check if you run itEPSS 0.20%Mar 21, 2026
- Medium6.9Terminal Services Manager 3.2.1 contains a local buffer overflow vulnerability that allows attackers to crash the application by supplying an excessively long string in the computeCheck if you run itEPSS 0.20%Mar 21, 2026
- Medium6.9Pidgin 2.13.0 contains a denial of service vulnerability that allows local attackers to crash the application by providing an excessively long username string during account creatiCheck if you run itEPSS 0.20%Mar 21, 2026
- Medium5.3A vulnerability has been found in Foundation Agents MetaGPT up to 0.8.1.Check if you run itEPSS 0.26%Mar 21, 2026
- Medium5.3A flaw has been found in PbootCMS up to 3.2.12.Check if you run itEPSS 0.21%Mar 21, 2026
- Medium5.3A vulnerability was detected in vanna-ai vanna up to 2.0.2.Check if you run itEPSS 0.20%Mar 21, 2026
- Medium5.3A security vulnerability has been detected in vanna-ai vanna up to 2.0.2.Check if you run itEPSS 0.24%Mar 21, 2026
- Medium5.3A weakness has been identified in PbootCMS up to 3.2.12.Check if you run itEPSS 0.28%Mar 21, 2026
- High7.5The JetFormBuilder plugin for WordPress is vulnerable to arbitrary file read via path traversal in all versions up to, and including, 3.5.6.2.Check if you run itEPSS 0.41%Mar 21, 2026
- Medium5.3A security flaw has been discovered in PbootCMS up to 3.2.12.Check if you run itEPSS 0.30%Mar 21, 2026
- High8.8The CMS Commander plugin for WordPress is vulnerable to SQL Injection via the 'or_blogname', 'or_blogdescription', and 'or_admin_email' parameters in all versions up t…Check if you run itEPSS 0.36%Mar 21, 2026
- High7.2The myLinksDump plugin for WordPress is vulnerable to SQL Injection via the 'sort_by' and 'sort_order' parameters in all versions up to, and including, 1.6 due to insu…Check if you run itEPSS 0.38%Mar 21, 2026
- Medium6.4The Show Posts list – Easy designs, filters and more plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_type' shortcode attribute in the 'swiftpost-lisCheck if you run itEPSS 0.25%Mar 21, 2026
- High7.2The Content Syndication Toolkit plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.3 via the redux_p AJAX action in the bundlCheck if you run itEPSS 0.29%Mar 21, 2026
- Medium6.4The Ed's Social Share plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode in all versions up to, and including, 2.0.Check if you run itEPSS 0.21%Mar 21, 2026
- Medium6.4The FuseDesk plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's fusedesk_newcase shortcode in all versions up to, and including, 6.8 due to insufficCheck if you run itEPSS 0.20%Mar 21, 2026
- Medium6.5The Task Manager plugin for WordPress is vulnerable to arbitrary shortcode execution via the 'search' AJAX action in all versions up to, and including, 3.0.2.Check if you run itEPSS 0.27%Mar 21, 2026
- Medium4.4The Mandatory Field plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.6.8 due to insufficient input sanitCheck if you run itEPSS 0.21%Mar 21, 2026
- Medium4.4The Ricerca – advanced search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via plugin's settings in all versions up to, and including, 1.1.12 due to insufficieCheck if you run itEPSS 0.16%Mar 21, 2026
- Medium4.4The Weaver Show Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'add_class' parameter in all versions up to, and including, 1.8.1.Check if you run itEPSS 0.22%Mar 21, 2026
- Medium6.4The PQ Addons – Creative Elementor Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via widget attributes in all versions up to, and including, 1.0.0 due tCheck if you run itEPSS 0.21%Mar 21, 2026
- Medium6.4The Text Toggle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' shortcode attribute of the [tt_part] and [tt] shortcodes in all versions up to andCheck if you run itEPSS 0.26%Mar 21, 2026
- Medium6.1The Post Snippits plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.Check if you run itEPSS 0.13%Mar 21, 2026
- Medium4.3The Neos Connector for Fakturama plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 0.0.14.Check if you run itEPSS 0.14%Mar 21, 2026
- Medium4.4The Wikilookup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Popup Width' setting in all versions up to, and including, 1.1.5.Check if you run itEPSS 0.20%Mar 21, 2026
Sort