Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.1A security vulnerability has been detected in 8nite metatrader-4-mcp 1.0.0.Check if you run itEPSS 0.40%May 2, 2026
- Medium5.3The Royal Addons for Elementor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the AJAX action in all vers…Check if you run itEPSS 0.46%May 2, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: media: vidtv: fix pass-by-value structs causing MSAN warnings vidtv_ts_null_write_into() and vidtv_…Check if you run itEPSS 0.17%May 2, 2026
- High8.8The Import and export users and customers plugin for WordPress is vulnerable to Privilege Escalation in all versions up to and including 2.0.8 via the function.Check if you run itEPSS 0.72%May 2, 2026
- Medium5.3The App Builder – Create Native Android & iOS Apps On The Flight plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to and including 5.6.0.Check if you run itEPSS 0.51%May 2, 2026
- Medium4.7In the Linux kernel, the following vulnerability has been resolved: xfs: close crash window in attr dabtree inactivation When inactivating an inode with node-format ex…Check if you run itEPSS 0.10%May 1, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: btrfs: reject root items with drop_progress and zero drop_level [BUG] When recovering relocation at…Check if you run itEPSS 0.16%May 1, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: bnxt_en: set backing store type from query type bnxt_hwrm_func_backing_store_qcaps_v2() stores resp…Check if you run itEPSS 0.16%May 1, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SMP: derive legacy responder STK authentication from MITM state The legacy responder pat…Check if you run itEPSS 0.28%May 1, 2026
- Critical9.8The Temporary Login plugin for WordPress is vulnerable to Authentication Bypass in versions up to and including 1.0.0.Check if you run itEPSS 2.93%May 1, 2026
- Medium6.4The Elementor Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the _elementor_data meta field in versions up to, and including, 4.0.4.Check if you run itEPSS 0.36%May 1, 2026
- Medium5.3The Five Star Restaurant Reservations plugin for WordPress is vulnerable to a payment bypass via PHP type juggling in versions up to, and including, 2.7.16 This is due…Check if you run itEPSS 0.24%Apr 30, 2026
- Medium6.5Wazuh is a free and open source platform used for threat prevention, detection, and response.Check if you run itEPSS 0.45%Apr 29, 2026
- Medium5.5Wazuh is a free and open source platform used for threat prevention, detection, and response.Check if you run itEPSS 0.18%Apr 29, 2026
- Medium6.7An improper access control vulnerability exists in the Cisco Intersight Device Connector for Nutanix Prism Central.Check if you run itEPSS 0.91%Apr 28, 2026
- High7.8In KDE KCoreAddons before 6.25, KShell::quoteArgs is intended to safely quote arguments so that they can be passed to a shell command.Check if you run itEPSS 0.25%Apr 28, 2026
- High7.0An authenticated administrative user who can import or save DataObject class definitions can inject attacker-controlled composite index metadata and trigger unintended…Check if you run itEPSS 0.60%Apr 27, 2026
- High8.2When authentication is enabled on the Apache Camel embedded HTTP server or embedded management server (camel-platform-http-main) and a non-root context path such as /a…Check if you run itEPSS 1.03%Apr 27, 2026
- High7.8The Camel-PQC FileBasedKeyLifecycleManager class deserializes the contents of files in the configured key directory using java.io.ObjectInputStream without applying an…Check if you run itEPSS 0.46%Apr 27, 2026
- Medium6.5LangChain is a framework for building agents and LLM-powered applications.Check if you run itEPSS 0.44%Apr 24, 2026
- High7.1Incomplete path traversal fixes in awslabs/tough before tough-v0.22.0 allow remote authenticated users with delegated signing authority to write files outside intended…Check if you run itEPSS 0.64%Apr 24, 2026
- High7.1Missing expiration, hash, and length enforcement in delegated metadata validation in awslabs/tough before tough-v0.22.0 allows remote authenticated users with delegate…Check if you run itEPSS 0.30%Apr 24, 2026
- High7.0Improper verification of cryptographic signature uniqueness in delegated role validation in awslabs/tough before tough-v0.22.0 allows remote authenticated users to byp…Check if you run itEPSS 0.37%Apr 24, 2026
- High7.1Better Auth is an authentication and authorization library for TypeScript.Check if you run itEPSS 0.37%Apr 24, 2026
- Medium6.5A Broken Access Control vulnerability exists in ClassroomIO v0.1.13 where an authenticated low-privileged "student" user can access unauthorized course-level informati…Check if you run itEPSS 0.21%Apr 24, 2026