Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Weblate is a web based localization tool.Check if you run itEPSS 0.54%Apr 15, 2026
- Medium6.1A vulnerability in the Desktop Agent functionality of Cisco Webex Contact Center could have allowed an unauthenticated, remote attacker to conduct cross-site scripting attacks.Check if you run itEPSS 0.22%Apr 15, 2026
- Medium6.1A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a reflected XSS attack again…Check if you run itEPSS 0.19%Apr 15, 2026
- High8.7Certain HP DeskJet All in One devices may be vulnerable to remote code execution caused by a buffer overflow when specially crafted Web Services for Devices (WSD) scan…Check if you run itEPSS 0.29%Apr 15, 2026
- High7.2An access control vulnerability was discovered in the Threat Intelligence functionality due to a specific access restriction not being properly enforced for users with…Check if you run itEPSS 0.33%Apr 15, 2026
- High7.5Apache::API::Password versions through 0.5.2 for Perl can generate insecure random values for salts.Check if you run itEPSS 0.58%Apr 15, 2026
- Medium6.3Acrobat Reader versions 26.001.21411, 24.001.30360, 24.001.30362 and earlier are affected by an Improperly Controlled Modification of Object Prototype Attributes ('Pro…Check if you run itEPSS 0.58%Apr 14, 2026
- High8.6Acrobat Reader versions 26.001.21411, 24.001.30360, 24.001.30362 and earlier are affected by an Improperly Controlled Modification of Object Prototype Attributes ('Pro…Check if you run itEPSS 0.67%Apr 14, 2026
- Medium6.8October is a Content Management System (CMS) and web platform.Check if you run itEPSS 0.40%Apr 14, 2026
- Medium5.4Kiuwan SAST improperly authorizes SSO logins for locally disabled mapped user accounts, allowing disabled users to continue accessing the application.Check if you run itEPSS 0.19%Apr 14, 2026
- Medium5.1A vulnerability has been identified in Industrial Edge Management Pro V1 (All versions >= V1.7.6 = V2.0.0 = V2.2.0 < V2.8.0).Check if you run itEPSS 0.36%Apr 14, 2026
- High8.7A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3).Check if you run itEPSS 0.53%Apr 14, 2026
- Medium6.3A vulnerability has been identified in Siemens Software Center (All versions < V3.5.8.2), Simcenter 3D (All versions < V2506.6000), Simcenter Femap (All versions < V25…Check if you run itEPSS 0.14%Apr 14, 2026
- Medium6.5The The Germanized for WooCommerce plugin for WordPress is vulnerable to arbitrary shortcode execution via 'account_holder' parameter in all versions up to, and including, 3.20.5.Check if you run itEPSS 0.46%Apr 14, 2026
- High7.5Crypt::SecretBuffer versions before 0.019 for Perl is suseceptible to timing attacks.Check if you run itEPSS 0.44%Apr 13, 2026
- Medium6.1A HTML Injection vulnerability exists in the Dashboard module of Vtiger CRM 8.4.0.Check if you run itEPSS 0.26%Apr 13, 2026
- Critical9.8Rate Limiting for attempting a user login is not being properly enforced, making HCL DevOps Velocity susceptible to brute-force attacks past the unsuccessful login attempt limit.Check if you run itEPSS 0.23%Apr 13, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD __build_packet_message()…Check if you run itEPSS 0.18%Apr 13, 2026
- Critical9.1Solstice::Session versions through 1440 for Perl generates session ids insecurely.Check if you run itEPSS 0.53%Apr 13, 2026
- High7.5The ZTE ZXEDM iEMS product has a password reset vulnerability for any user.Because the management of the cloud EMS portal does not properly control access to the user…Check if you run itEPSS 0.35%Apr 13, 2026
- Medium6.8The Form Maker by 10Web WordPress plugin before 1.15.38 does not properly prepare SQL queries when the "MySQL Mapping" feature is in use, which could make SQL Injectio…Check if you run itEPSS 0.27%Apr 13, 2026
- Medium6.5Net::CIDR::Lite versions before 0.23 for Perl mishandles IPv4 mapped IPv6 addresses, which may allow IP ACL bypass.Check if you run itEPSS 0.40%Apr 10, 2026
- High7.5Net::CIDR::Lite versions before 0.23 for Perl does not validate IPv6 group count, which may allow IP ACL bypass.Check if you run itEPSS 0.51%Apr 10, 2026
- Medium6.9ajenti.plugin.core defines all necessary core elements to allow Ajenti to run properly.Check if you run itEPSS 0.28%Apr 10, 2026
- Critical9.3ajenti.plugin.core defines all necessary core elements to allow Ajenti to run properly.Check if you run itEPSS 0.45%Apr 10, 2026