Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3The Image Buzz plugin for WordPress is vulnerable to unauthorized API key modification due to missing authorization checks in all versions up to, and including, 1.0.3.Check if you run itEPSS 0.32%Sep 22, 2026
- Critical9.3F5 BIG-IP APM Heap-based Buffer Overflow VulnerabilityPatch nowKEVEPSS 24.94%Sep 22, 2026
- Critical9.5Arista VeloCloud Orchestrator Improper Input Validation VulnerabilityPatch nowKEVEPSS 1.38%Sep 22, 2026
- Critical9.8Check Point Multiple Products Path Traversal VulnerabilityPatch nowKEVEPSS 91.61%Sep 22, 2026
- High8.1WordPress Core Remote File Inclusion VulnerabilityPatch nowKEVEPSS 95.77%Sep 22, 2026
- Medium5.3The default AEAD nonce provider for the PSA Internal Trusted Storage transform module, secure_storage_its_transform_aead_get_nonce() in subsys/secure_storage/src/its/t…Check if you run itEPSS 0.08%Sep 21, 2026
- High7.5A flaw was found in the SmallRye Fault Tolerance library, which is used by Quarkus to provide strategies like retries and circuit breakers for microservices.Check if you run itEPSS 0.63%Sep 21, 2026
- Medium5.3A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support.Check if you run itEPSS 1.20%Sep 21, 2026
- High8.1A flaw was found in pki-core.Check if you run itEPSS 0.21%Sep 21, 2026
- High8.6UVdesk core-framework before 1.1.7 contains an improper privilege management vulnerability in the editAgent endpoint that allows agents with agent-management privilege…Check if you run itEPSS 0.64%Sep 21, 2026
- Medium5.3UVdesk core-framework before 1.1.7 contains an authorization bypass vulnerability in the saved reply endpoint that allows authenticated agents to access replies restri…Check if you run itEPSS 0.42%Sep 21, 2026
- Medium5.1UVdesk core-framework before 1.1.7 contains a stored cross-site scripting vulnerability in the SwiftMailer configuration identifier parameter of the createMailerConfig…Check if you run itEPSS 0.32%Sep 21, 2026
- Low2.1A vulnerability was determined in ST Engineering iDirect iDX and Evo iDX.Check if you run itEPSS 0.45%Sep 21, 2026
- Low2.1A vulnerability was found in ST Engineering iDirect iDX and Evo iDX.Check if you run itEPSS 0.43%Sep 21, 2026
- Critical9.1UrlUtil.getBaseUrl builds the absolute URLs in a response — download links, icons, asset and API URLs — from the X-Forwarded-Host, X-Forwarded-Proto and X-Forwarded-Pr…Check if you run itEPSS 0.33%Sep 21, 2026
- UnknownCVE-2026-89155Open the advisorySep 19, 2026
- Low3.5The Business Name Generator WordPress plugin through 1.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to per…Check if you run itEPSS 0.24%Sep 19, 2026
- Critical9.3A flaw was found in the OpenShift console.Check if you run itEPSS 0.73%Sep 18, 2026
- Medium6.5A flaw was found in Netty's component.Check if you run itEPSS 1.35%Sep 18, 2026
- Medium6.5A flaw was found in Netty's HTTP/1 decoder.Check if you run itEPSS 0.41%Sep 18, 2026
- Medium6.1A flaw was found in the Quarkus Qute template engine.Check if you run itEPSS 0.54%Sep 18, 2026
- Medium5.5A flaw was found in cockpit-machines.Check if you run itEPSS 0.17%Sep 18, 2026
- Medium5.0A flaw was found in .Check if you run itEPSS 0.17%Sep 18, 2026
- Medium5.0A flaw was found in cockpit-machines.Check if you run itEPSS 0.11%Sep 18, 2026
- High7.4PJSIP is a free and open source multimedia communication library written in C.Check if you run itEPSS 0.23%Sep 18, 2026
Sort