Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.1Dual DHCP DNS Server 8.01 improperly accepts and caches UDP DNS responses without validating that the response originates from a legitimate configured upstream DNS server.Check if you run itEPSS 0.45%Apr 7, 2026
- Medium6.5The SQL Chart Builder WordPress plugin before 2.3.8 does not properly escape user input as it is concatened to SQL queries, making it possible for attackers to conduct…Check if you run itEPSS 0.29%Apr 7, 2026
- Medium5.4The Popup Box WordPress plugin before 5.5.0 does not properly validate nonces in the add_or_edit_popupbox() function before saving popup data, allowing unauthenticated…Check if you run itEPSS 0.14%Apr 7, 2026
- High8.6Adobe Acrobat and Reader Prototype Pollution VulnerabilityPatch nowKEVEPSS 2.18%Apr 7, 2026
- Medium5.3Hugo is a static site generator.Check if you run itEPSS 0.23%Apr 6, 2026
- Critical9.1fast-jwt provides fast JSON Web Token (JWT) implementation.Check if you run itEPSS 0.22%Apr 6, 2026
- Critical9.0CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Check if you run itEPSS 0.56%Apr 6, 2026
- Critical9.4CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Check if you run itEPSS 0.45%Apr 6, 2026
- Medium4.8Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking application.Check if you run itEPSS 0.29%Apr 6, 2026
- High7.8Memory Corruption when handling power management requests with improperly sized input/output buffers.Check if you run itEPSS 0.07%Apr 6, 2026
- High8.8Homarr is an open-source dashboard.Check if you run itEPSS 0.33%Apr 6, 2026
- Medium6.1Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking application.Check if you run itEPSS 0.25%Apr 6, 2026
- Medium4.3The Kadence Blocks — Page Builder Toolkit for Gutenberg Editor plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.6.3.Check if you run itEPSS 0.29%Apr 4, 2026
- High7.8Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.Check if you run itEPSS 0.18%Apr 4, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix memory leak in xe_vm_madvise_ioctl When check_bo_args_are_sane() validation fails, jump…Check if you run itEPSS 0.16%Apr 3, 2026
- High8.2FastMCP is the standard framework for building MCP applications.Check if you run itEPSS 0.30%Apr 3, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN uart_write_room() and uart_write()…Check if you run itEPSS 0.12%Apr 3, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: soc: microchip: mpfs: Fix memory leak in mpfs_sys_controller_probe() In mpfs_sys_controller_probe()…Check if you run itEPSS 0.12%Apr 3, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() ctnetlink_dump_exp_ct() stores…Check if you run itEPSS 0.13%Apr 3, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: mshv: Fix use-after-free in mshv_map_user_memory error path In the error path of mshv_map_user_memo…Check if you run itEPSS 0.12%Apr 3, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix ID register initialization for non-protected pKVM guests In protected mode, the hyp…Check if you run itEPSS 0.12%Apr 3, 2026
- High8.7Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE parameter to /cgi-bin/logs_smtp.cgi.Check if you run itEPSS 1.89%Apr 2, 2026
- High8.7Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE parameter to /cgi-bin/logs_openvpn.cgi.Check if you run itEPSS 1.89%Apr 2, 2026
- High8.7Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE parameter to /cgi-bin/logs_log.cgi.Check if you run itEPSS 1.89%Apr 2, 2026
- High8.7Endian Firewall version 3.3.25 and prior allow authenticated users to execute arbitrary OS commands via the DATE parameter to /cgi-bin/logs_ids.cgi.Check if you run itEPSS 1.89%Apr 2, 2026