Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Jira Align is vulnerable to an authorization issue.Check if you run itEPSS 0.19%Oct 22, 2025
- Medium5.3Jira Align is vulnerable to an authorization issue.Check if you run itEPSS 0.21%Oct 22, 2025
- High7.5Querying for records within a specially crafted zone containing certain malformed DNSKEY records can lead to CPU exhaustion.Check this weekEPSS 10.74%Oct 22, 2025
- Medium5.3Nautobot Single Source of Truth (SSoT) is an app for Nautobot.Check if you run itEPSS 0.29%Oct 22, 2025
- Low2.1Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation MediaWiki CookieConsent extension allows CrossCheck if you run itEPSS 0.29%Oct 22, 2025
- Medium6.7NVIDIA Bluefield and ConnectX contain a vulnerability in the management interface that could allow a malicious actor with high privilege access to execute arbitrary code.Check if you run itEPSS 0.18%Oct 22, 2025
- High8.8my little forum is a PHP and MySQL based internet forum that displays the messages in classical threaded view.Check if you run itEPSS 0.40%Oct 22, 2025
- High7.9OpenWrt Project is a Linux operating system targeting embedded devices.Check if you run itEPSS 0.26%Oct 22, 2025
- High7.9OpenWrt Project is a Linux operating system targeting embedded devices.Check if you run itEPSS 0.19%Oct 22, 2025
- Medium6.3In Eclipse Vert.x versions [4.0.0, 4.5.21] and [5.0.0, 5.0.4], a StaticHandler configuration for restricting access to hidden files fails to restrict access to hidden directories,Check if you run itEPSS 0.50%Oct 22, 2025
- Low2.3In Eclipse Vert.x versions [4.0.0, 4.5.21] and [5.0.0, 5.0.4], when "directory listing" is enabled, file and directory names are inserted into generated HTML without proper escapinCheck if you run itEPSS 0.29%Oct 22, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter.This issue affects MDTCheck if you run itEPSS 0.18%Oct 22, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in E2Pdf e2pdf e2pdf.This issue affects e2pdf: from n/a through <= 1.28.09.Check if you run itEPSS 0.18%Oct 22, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Travel WP Travel Gutenberg Blocks wp-travel-blocks.This issue affects WP TrCheck if you run itEPSS 0.18%Oct 22, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themepoints Tab Ultimate tabs-pro.This issue affects Tab Ultimate: from n/a thCheck if you run itEPSS 0.18%Oct 22, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in favethemes Houzez Theme - Functionality houzez-theme-functionality.This issueCheck if you run itEPSS 0.18%Oct 22, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in favethemes Houzez Theme - Functionality houzez-theme-functiCheck if you run itEPSS 0.42%Oct 22, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event post event-post.This issue affects Event post: from n/a throuCheck if you run itEPSS 0.18%Oct 22, 2025
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in themesion Grevo grevo.This issue affects Grevo: from n/a thCheck if you run itEPSS 0.46%Oct 22, 2025
- Medium5.4Missing Authorization vulnerability in StellarWP Event Tickets event-tickets.This issue affects Event Tickets: from n/a through <= 5.26.3.Check if you run itEPSS 0.22%Oct 22, 2025
- Medium4.3Insertion of Sensitive Information Into Sent Data vulnerability in Blockspare Blockspare blockspare allows Retrieve Embedded Sensitive Data.This issue affects Blockspare: from n/aCheck if you run itEPSS 0.28%Oct 22, 2025
- Critical9.8Deserialization of Untrusted Data vulnerability in eyecix JobSearch wp-jobsearch.This issue affects JobSearch: from n/a through < 3.0.8.Check if you run itEPSS 0.58%Oct 22, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jonathan Jernigan Pie Calendar pie-calendar.This issue affects Pie Calendar: fCheck if you run itEPSS 0.22%Oct 22, 2025
- Critical9.0s2member s2member Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.39%Oct 22, 2025
- High7.5Missing Authorization vulnerability in BuddyPress BuddyPress buddypress.This issue affects BuddyPress: from n/a through <= 14.3.4.Check if you run itEPSS 0.43%Oct 22, 2025
Sort