Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5In Apache Airflow versions before 3.1.6, when rendered template fields in a Dag exceed [core] max_templated_field_length, sensitive values could be exposed in cleartex…Check if you run itEPSS 0.62%Jan 16, 2026
- High7.5In Apache Airflow versions before 3.1.6, and 2.11.1 the proxies and proxy fields within a Connection may include proxy URLs containing embedded authentication information.Check if you run itEPSS 1.88%Jan 16, 2026
- High8.2The Membership Plugin – Restrict Content plugin for WordPress is vulnerable to Missing Authentication in all versions up to, and including, 3.2.16 via the 'rcp_stripe_create_setup_Check if you run itEPSS 0.46%Jan 16, 2026
- Low3.1Mattermost versions 10.11.x <= 10.11.8 fail to validate input size before processing hashtags which allows an authenticated attacker to exhaust CPU resources via a single HTTP requCheck if you run itEPSS 0.35%Jan 16, 2026
- High8.4There is a vulnerability in the Supermicro BMC firmware validation logic at Supermicro MBD-X13SEM-F .Check if you run itEPSS 0.13%Jan 16, 2026
- Critical9.8Apache brpc Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 25.71%Jan 16, 2026
- High7.2There is a vulnerability in the Supermicro BMC firmware validation logic at Supermicro MBD-X12STW-F .Check if you run itEPSS 0.30%Jan 16, 2026
- Medium6.4The User Submitted Posts – Enable Users to Submit Posts from the Front End plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'usp_access' shortcodeCheck if you run itEPSS 0.25%Jan 16, 2026
- Medium5.3The Essential Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to and including 6.5.5 via the 'eael_product_quickview_poCheck if you run itEPSS 0.37%Jan 16, 2026
- High7.1Path Traversal vulnerability exists in multiple Network Cameras TRIFORA 3 series provided by TOA Corporation.Check if you run itEPSS 0.46%Jan 16, 2026
- Medium4.8Cross-site scripting vulnerability exists in multiple Network Cameras TRIFORA 3 series provided by TOA Corporation.Check if you run itEPSS 0.21%Jan 16, 2026
- High8.7OS Command Injection vulnerability exists in multiple Network Cameras TRIFORA 3 series provided by TOA Corporation, which may allow a logged-in user with the low("monitoring user")Check if you run itEPSS 1.53%Jan 16, 2026
- Medium4.3The GetGenie plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.3.0.Check if you run itEPSS 0.25%Jan 16, 2026
- Medium6.1The RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘className’ parameter in alCheck if you run itEPSS 0.21%Jan 16, 2026
- Medium5.3The Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on theCheck if you run itEPSS 0.32%Jan 16, 2026
- Medium5.3The Rede Itaú for WooCommerce plugin for WordPress is vulnerable to order status manipulation due to insufficient verification of data authenticity in all versions up to, and incluCheck if you run itEPSS 0.18%Jan 16, 2026
- Medium6.4The Related Posts by Taxonomy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'related_posts_by_tax' shortcode in all versions up to, and includiCheck if you run itEPSS 0.25%Jan 16, 2026
- None0.0Not usedCheck if you run itEPSS 0.00%Jan 16, 2026
- None0.0Not usedCheck if you run itEPSS 0.00%Jan 16, 2026
- None0.0Not usedCheck if you run itEPSS 0.00%Jan 16, 2026
- None0.0Not usedCheck if you run itEPSS 0.00%Jan 16, 2026
- None0.0Not usedCheck if you run itEPSS 0.00%Jan 16, 2026
- None0.0Not usedCheck if you run itEPSS 0.00%Jan 16, 2026
- High7.8Delta Electronics DIAView has Command Injection vulnerability.Check if you run itEPSS 1.51%Jan 16, 2026
- Medium6.5lucy-xss-filter before commit e5826c0 allows an attacker to execute malicious JavaScript due to improper sanitization caused by misconfigured default superset rule files.Check if you run itEPSS 0.22%Jan 16, 2026
Sort