Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3The Image Buzz plugin for WordPress is vulnerable to unauthorized API key modification due to missing authorization checks in all versions up to, and including, 1.0.3.Check if you run itEPSS 0.23%Sep 22, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.43%Sep 22, 2026
- High8.6UVdesk core-framework before 1.1.7 contains an improper privilege management vulnerability in the editAgent endpoint that allows agents with agent-management privilege…Check if you run itEPSS 0.44%Sep 21, 2026
- UnknownFlowiseAI Flowise Use of Hard-coded Cryptographic KeyPatch nowKEVEPSS 0.66%Sep 21, 2026
- Low3.5The Business Name Generator WordPress plugin through 1.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to per…Check if you run itEPSS 0.14%Sep 19, 2026
- Critical9.8HCL BigFix Service Management is affected by an Administrative Session Concurrency vulnerability.Check if you run itEPSS 0.20%Sep 18, 2026
- Medium4.4The CSS & JavaScript Toolbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 12.0.6 via the Assignment Engine fields.Check if you run itEPSS 0.19%Sep 18, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate seg_id fields from persistent memory cache_pos_decode(), cache_key_decode() and…Check if you run itEPSS 0.17%Sep 17, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: net/sched: account classifier filter allocations to memcg Allocations in the tc classifier *_change…Check if you run itEPSS 0.21%Sep 17, 2026
- Medium4.6MikroTik firmware 7.19.4 stores sensitive authentication credentials and network state in cleartext within non-volatile storage.Check if you run itEPSS 0.16%Sep 16, 2026
- Medium4.9ZDI-26-718: Cisco Identity Services Engine MnTRESTLivelogService XML External Entity Processing Information Disclosure VulnerabilityCheck if you run itEPSS 0.29%Sep 16, 2026
- High8.8drm/amdkfd: Add TLB flush after MES queue eviction/suspensionCheck if you run itEPSS 0.17%Sep 16, 2026
- High8.5Concrete CMS 9 before 9.5.3 was vulnerable to stored cross-site scripting (XSS) in the Feature, Feature Link, Hero Image, and Image blocks and before Concrete 8.5.21 i…Check if you run itEPSS 0.19%Sep 15, 2026
- High7.8Acronis Backup Incorrect Default Permissions VulnerabilityPatch nowKEVEPSS 0.23%Sep 15, 2026
- Medium6.8gitoxide is an implementation of git written in Rust.Check if you run itEPSS 0.19%Sep 14, 2026
- Unknowncar_rental_management_system_project car_rental_management_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 5.06%Sep 14, 2026
- Unknowncar_rental_management_system_project car_rental_management_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 5.31%Sep 14, 2026
- Unknowncar_rental_management_system_project car_rental_management_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 4.56%Sep 14, 2026
- UnknownNagios Nagios XI Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 42.05%Sep 14, 2026
- UnknownNagios Nagios XI Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 42.05%Sep 14, 2026
- Low1.8Grav 1.7.50.2 allows admins to enter JavaScript via the Home Page editor.Check if you run itEPSS 0.30%Sep 13, 2026
- Low3.5The Translate WordPress with GTranslate WordPress plugin before 3.0.10 does not validate one of its settings before the bundled front-end scripts build markup from it,…Check if you run itEPSS 0.14%Sep 11, 2026
- UnknownFortinet FortiOS Insufficient Session ExpirationPatch nowKEVEPSS 0.34%Sep 11, 2026
- High7.0A flaw was found in the admin backend of gvfs.Check if you run itEPSS 0.17%Sep 10, 2026
- High8.1A flaw was found in FreeIPA.Check if you run itEPSS 0.42%Sep 9, 2026