Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2OPEXUS eCASE Audit allows an authenticated attacker to modify client-side JavaScript or craft HTTP requests to access functions or buttons that have been disabled or blocked by anCheck if you run itEPSS 0.32%Jan 8, 2026
- Medium4.8Ideagen DevonWay contains a stored cross site scripting vulnerability.Check if you run itEPSS 0.23%Jan 8, 2026
- Medium5.3Missing Authorization vulnerability in Re Gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Re Gallery: from n/a through 1.18.9.Check if you run itEPSS 0.29%Jan 8, 2026
- Medium4.3Missing Authorization vulnerability in baqend Speed Kit baqend allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Speed Kit: from n/a througCheck if you run itEPSS 0.18%Jan 8, 2026
- Medium5.3Missing Authorization vulnerability in IdeaBox Creations Dashboard Welcome for Beaver Builder dashboard-welcome-for-beaver-builder allows Exploiting Incorrectly Configured Access CCheck if you run itEPSS 0.21%Jan 8, 2026
- Medium4.3Authorization Bypass Through User-Controlled Key vulnerability in Wptexture Image Slider Slideshow image-slider-slideshow allows Exploiting Incorrectly Configured Access Control SeCheck if you run itEPSS 0.20%Jan 8, 2026
- Medium5.4Missing Authorization vulnerability in niklaslindemann Bulk Landing Page Creator for WordPress LPagery lpagery allows Exploiting Incorrectly Configured Access Control Security LeveCheck if you run itEPSS 0.20%Jan 8, 2026
- Medium4.3Missing Authorization vulnerability in Nawawi Jamili Docket Cache docket-cache allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Docket CacCheck if you run itEPSS 0.30%Jan 8, 2026
- Medium5.4Missing Authorization vulnerability in Passionate Brains GA4WP: Google Analytics for WordPress ga-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.ThiCheck if you run itEPSS 0.20%Jan 8, 2026
- Medium6.1Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki - UploadWizard extension allows Cross-SiCheck if you run itEPSS 0.24%Jan 8, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pencilwp X Addons for Elementor x-addons-elementor allows DOM-Based XSS.This iCheck if you run itEPSS 0.21%Jan 8, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BuddyDev MediaPress mediapress allows Stored XSS.This issue affects MediaPressCheck if you run itEPSS 0.20%Jan 8, 2026
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in G5Theme Handmade Framework handmade-framework allows PHP LoCheck if you run itEPSS 0.45%Jan 8, 2026
- Critical9.0This vulnerability allows a Backup Operator to perform remote code execution (RCE) as the postgres user by sending a malicious interval or order parameter.Check if you run itEPSS 1.54%Jan 8, 2026
- Critical9.0This vulnerability allows a Backup or Tape Operator to write files as root.Check if you run itEPSS 0.72%Jan 8, 2026
- Critical9.0This vulnerability allows a Backup Administrator to perform remote code execution (RCE) as the postgres user by sending a malicious password parameter.Check if you run itEPSS 1.18%Jan 8, 2026
- High7.8This vulnerability allows a Backup or Tape Operator to perform remote code execution (RCE) as root by creating a malicious backup configuration file.Check if you run itEPSS 0.98%Jan 8, 2026
- Medium6.5Missing Authorization vulnerability in Munir Kamal Block Slider block-slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Block SliderCheck if you run itEPSS 0.31%Jan 8, 2026
- High8.8A malicious actor in Wi-Fi range of the affected product could leverage a vulnerability in the airMAX Wireless Protocol to achieve a remote code execution (RCE) within the affectedCheck if you run itEPSS 0.43%Jan 8, 2026
- Medium6.6CoreDNS is a DNS server that chains plugins.Check if you run itEPSS 0.49%Jan 8, 2026
- High8.8iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles.Check if you run itEPSS 0.41%Jan 8, 2026
- Medium6.5Mastodon is a free, open-source social network server based on ActivityPub.Check if you run itEPSS 0.27%Jan 8, 2026
- High7.0A Improper Neutralization of Argument Delimiters vulnerability in Foomuuri can lead to integrity loss of the firewall configuration or further unspecified impact by manipulating thCheck if you run itEPSS 0.19%Jan 8, 2026
- High7.1Mastodon is a free, open-source social network server based on ActivityPub.Check if you run itEPSS 0.29%Jan 8, 2026
- High8.5OpenMetadata is a unified metadata platform.Check if you run itEPSS 1.29%Jan 8, 2026
Sort