Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5A flaw was found in the clevis PKCS#11 pin.Check if you run itEPSS 0.09%Oct 14, 2026
- Critical9.8Deserialization of Untrusted Data vulnerability in itthinx Affiliates affiliates allows Object Injection.This issue affects Affiliates: from n/a through 7.0.1.Check if you run itEPSS 0.46%Oct 14, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetProductTables jet-product-tables allows Reflected X…Check if you run itEPSS 0.20%Oct 14, 2026
- Medium6.5Missing Authorization vulnerability in miniOrange WP OAuth Server miniorange-oauth-20-server allows Exploiting Incorrectly Configured Access Control Security Levels.Th…Check if you run itEPSS 0.27%Oct 14, 2026
- High7.3Missing Authorization vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-live-webcams allows Exploiting Incorrectly Configured Access Control Security L…Check if you run itEPSS 0.27%Oct 14, 2026
- Medium6.5Missing Authorization vulnerability in Magepeople inc.Check if you run itEPSS 0.27%Oct 14, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in axew3.com WP w3all phpBB wp-w3all-phpbb-integration allows Stored…Check if you run itEPSS 0.18%Oct 14, 2026
- High7.3Session Fixation vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Session Hijacking.This issue affects Broadcast L…Check if you run itEPSS 0.24%Oct 14, 2026
- Medium6.5Missing Authorization vulnerability in Muralidharan Ramasamy Push Notification for Post and BuddyPress push-notification-for-post-and-buddypress allows Exploiting Inco…Check if you run itEPSS 0.22%Oct 14, 2026
- High8.8Deserialization of Untrusted Data vulnerability in Brainstorm Force SureCart surecart allows Object Injection.This issue affects SureCart: from n/a through 4.9.3.Check if you run itEPSS 0.42%Oct 14, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force SureCart surecart allows Reflected XSS.This issu…Check if you run itEPSS 0.20%Oct 14, 2026
- High7.5A security vulnerability in HPE NonStop SNMP Trap Multiplexer may allow remote code executionCheck if you run itEPSS 0.57%Oct 14, 2026
- High8.2A security vulnerability in HPE NonStop DNS 9.2.3 Non Secure Version could cause a Denial of Service.Check if you run itEPSS 0.33%Oct 14, 2026
- Medium5.3A security vulnerability in HPE NonStop TSQLFIL may cause address space corruption when a specific API is called.Check if you run itEPSS 0.11%Oct 14, 2026
- HighBy permanently omitting the final control-response line, a malicious FTP, IMAP, POP3, or SMTP server can exploit libcurl and completely bypass its configured transfer…Check if you run itEPSS 0.31%Oct 14, 2026
- HighWhen writing a long cookie name and value to a Netscape cookie jar, a remote HTTP server can make write a record that exceeds its line-length parsing limit.Check if you run itEPSS 0.29%Oct 14, 2026
- UnknownWhen libcurl uses libssh2 with a hashed file, an unrelated initial entry can cause host key validation to report a key *mismatch* as a *missing* key to the callback.Check if you run itEPSS 0.27%Oct 14, 2026
- UnknownA remote HTTP server can set a cookie that curl accepts and writes to a Netscape cookie jar but cannot reload.Check if you run itEPSS 0.29%Oct 14, 2026
- UnknownA flaw in the curl command line tool's logic makes it only set SSH host verification options when interacting directly using SFTP or SCP, and not as a result of follow…Check if you run itEPSS 0.27%Oct 14, 2026
- UnknownWhen (or the command line tool's option) is set with one of the documented prefixes ( , , ), that binding is not part of the connection reuse key, so a later transfer…Check if you run itEPSS 0.29%Oct 14, 2026
- UnknownWhen curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer.Check if you run itEPSS 0.26%Oct 14, 2026
- Medium5.4The Responsive Blocks WordPress plugin before 2.3.0 does not sanitise or escape some of the values submitted with its Form block before adding them to the HTML notific…Check if you run itEPSS 0.23%Oct 14, 2026
- Medium5.3The Tickera WordPress plugin before 3.6.0.4 does not correctly verify the integrity of incoming payment notifications, and the validated signature does not cover the o…Check if you run itEPSS 0.15%Oct 14, 2026
- Low3.3A flaw was found in BusyBox dpkg.Check if you run itEPSS 0.17%Oct 14, 2026
- Medium5.3The WPForms Lite WordPress plugin before 2.0.2.2 does not verify server-side that a payment was completed before accepting a submission on forms using its PayPal Comme…Check if you run itEPSS 0.14%Oct 14, 2026
Sort