Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownStellarWP the_events_calendar Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 49.91%Oct 13, 2026
- Unknowndavidlingren media_library_assistant Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.36%Oct 13, 2026
- UnknownLiteSpeed Technologies LiteSpeed Cache Incorrect Privilege AssignmentPatch nowKEVEPSS 0.90%Oct 13, 2026
- Unknownbrizy brizy Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.96%Oct 13, 2026
- Unknownwppa wp_photo_album_plus Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.54%Oct 13, 2026
- UnknownWebToffee import_export_wordpress_users Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.52%Oct 13, 2026
- Unknownbrainstormforce astra Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.35%Oct 13, 2026
- Unknownbrizy brizy Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.38%Oct 13, 2026
- Unknownkriesi enfold Improper Access ControlPatch nowKEVEPSS 0.33%Oct 13, 2026
- UnknownImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.33%Oct 13, 2026
- Unknownsimple-e-commerce-shopping-cart_project simple-e-commerce-shopping-cart Missing AuthorizationPatch nowKEVEPSS 0.26%Oct 13, 2026
- UnknownWebToffee import_export_wordpress_users Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 1.37%Oct 13, 2026
- UnknownHasThemes HT Mega Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 0.61%Oct 13, 2026
- Unknownuserproplugin userpro Incorrect Privilege AssignmentPatch nowKEVEPSS 0.92%Oct 13, 2026
- Unknownavada fusion_builder Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.39%Oct 13, 2026
- UnknownMissing AuthorizationPatch nowKEVEPSS 0.56%Oct 13, 2026
- Unknownwp-ecommerce easy_wp_smtp Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 1.46%Oct 13, 2026
- High8.1IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.Check if you run itEPSS 0.36%Oct 12, 2026
- High7.4IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a forged TLS certificate, intercept the connection, and capture the IAM b…Check if you run itEPSS 0.14%Oct 12, 2026
- Critical9.9IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of pathname during a path traversal.Check if you run itEPSS 0.52%Oct 12, 2026
- High8.8IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements us…Check if you run itEPSS 0.46%Oct 12, 2026
- Medium6.5IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an exposure of sensitive information to…Check if you run itEPSS 0.31%Oct 12, 2026
- Critical9.6IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability.Check if you run itEPSS 0.42%Oct 12, 2026
- High8.8IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special element…Check if you run itEPSS 0.43%Oct 12, 2026
- Medium5.4IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary JavaScript due to improper output encoding.Check if you run itEPSS 0.18%Oct 12, 2026
Sort