Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5A flaw was found in the OpenShift Router.Check if you run itEPSS 0.62%May 29, 2026
- Medium6.5A flaw was found in the OpenShift Router.Check if you run itEPSS 0.53%May 29, 2026
- Low2.7A flaw was found in the Quay config-tool's GitLab OAuth validator.Check if you run itEPSS 0.20%May 29, 2026
- Medium5.3The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the update_sit…Check if you run itEPSS 0.41%May 29, 2026
- Medium5.3The Contact Form 7 – PayPal & Stripe Add-on plugin for WordPress is vulnerable to Payment Bypass via Insufficient Verification of Data Authenticity in all versions up…Check if you run itEPSS 0.25%May 29, 2026
- Critical10.0The acer_cgi.log file in the device firmware is accessible without authentication via the web interface.Check if you run itEPSS 0.61%May 29, 2026
- Critical10.0Web endpoints intended for the Acer Connect app improperly validate the HTTP Authorization header, failing to block requests when Base64 decoding fails.Check if you run itEPSS 0.53%May 29, 2026
- High8.6The Wi-Fi device blocking feature fails to sanitize MAC address input, allowing injection and execution of arbitrary shell commands.Check if you run itEPSS 0.66%May 29, 2026
- Medium4.1A flaw was found in the Quay config-tool's LDAP and SMTP validation functions.Check if you run itEPSS 0.19%May 29, 2026
- Medium4.1Weak authentication in the Wireless Control Module (WCM) of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker with read acc…Check if you run itEPSS 0.14%May 29, 2026
- Critical9.8The OTP Login With Phone Number, OTP Verification plugin for WordPress is vulnerable to authentication bypass in versions 1.8.50 through 1.8.60.Check if you run itEPSS 0.90%May 29, 2026
- High7.1Service Center developed by BankPro E-Service Technology has an Insecure Direct Object Reference vulnerability, allowing authenticated remote attackers to modify the p…Check if you run itEPSS 0.43%May 29, 2026
- Medium4.8A flaw was found in libsoup.Check if you run itEPSS 0.87%May 29, 2026
- Medium6.4The Automotive Car Dealership Business WordPress Theme for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Project Details' custom field in Portfolio I…Check if you run itEPSS 0.16%May 29, 2026
- High8.8The WooCommerce Infinite Scroll and Ajax Pagination plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.8 via the 'setti…Check if you run itEPSS 0.38%May 29, 2026
- Medium5.3The Breeze plugin for WordPress is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in all versions up to, and including, 2.5.2 This is due to…Check if you run itEPSS 0.27%May 29, 2026
- Medium4.3The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to and including 6.3.7.Check if you run itEPSS 0.48%May 29, 2026
- Medium6.5Out of bounds read in WebRTC in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from process memory…Check if you run itEPSS 0.29%May 28, 2026
- Medium5.3Insufficient validation of untrusted input in Media in Google Chrome on ChromeOS prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer pro…Check if you run itEPSS 0.28%May 28, 2026
- Medium6.5Inappropriate implementation in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from process memory…Check if you run itEPSS 0.20%May 28, 2026
- Medium6.5Out of bounds read in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from process memory via a cr…Check if you run itEPSS 0.26%May 28, 2026
- Medium6.5Uninitialized Use in WebGL in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from process memor…Check if you run itEPSS 0.35%May 28, 2026
- Medium6.5Inappropriate implementation in GPU in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from proc…Check if you run itEPSS 0.32%May 28, 2026
- Medium6.5Out of bounds read in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from process memory via a cr…Check if you run itEPSS 0.25%May 28, 2026
- Medium4.3A flaw was found in glib-networking.Check if you run itEPSS 0.18%May 28, 2026
Sort