Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Smartshop 1 contains a cross-site request forgery vulnerability that allows attackers to modify user profiles by tricking authenticated users into submitting malicious requests.Check if you run itEPSS 0.13%May 23, 2026
- High8.8Smartshop 1 contains a time-based blind SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through…Check if you run itEPSS 0.33%May 23, 2026
- High8.8Smartshop 1 contains a SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id parameter.Check if you run itEPSS 0.33%May 23, 2026
- High8.8Smartshop 1 contains a SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id parameter.Check if you run itEPSS 0.33%May 23, 2026
- Low2.1A weakness has been identified in QuantumNous new-api up to 0.12.1.Check if you run itEPSS 0.19%May 23, 2026
- Low2.1A vulnerability was identified in calcom cal.diy up to 4.9.4.Check if you run itEPSS 0.19%May 23, 2026
- High7.8Linux Kernel Out-of-bounds WritePatch nowKEVEPSS 10.19%May 23, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: net: skbuff: propagate shared-frag marker through frag-transfer helpers Two frag-transfer helpers (…Check if you run itEPSS 1.99%May 23, 2026
- Low2.1A weakness has been identified in Edimax BR-6428NS 1.10.Check if you run itEPSS 1.91%May 23, 2026
- High7.4A vulnerability was identified in Edimax BR-6428NS 1.10.Check if you run itEPSS 0.54%May 23, 2026
- High8.2The WooCommerce PayPal Payments plugin for WordPress is vulnerable to unauthorized order manipulation and information disclosure due to missing authorization checks on…Check if you run itEPSS 0.46%May 23, 2026
- High8.8Improper Privilege ManagementPatch nowKEVEPSS 0.25%May 23, 2026
- High8.8The WishList Member plugin for WordPress is vulnerable to Privilege Escalation via Missing Authorization in versions up to and including 3.30.1.Check if you run itEPSS 0.26%May 23, 2026
- Medium5.3Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts.Check if you run itEPSS 0.40%May 22, 2026
- Medium5.3Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts.Check if you run itEPSS 0.34%May 22, 2026
- High8.7NukeViet CMS is a multi Content Management System.Check if you run itEPSS 0.42%May 22, 2026
- High8.1RT is an open source, enterprise-grade issue and ticket tracking system.Check if you run itEPSS 0.39%May 22, 2026
- High8.8RT is an open source, enterprise-grade issue and ticket tracking system.Check if you run itEPSS 0.34%May 22, 2026
- High7.1RT is an open source, enterprise-grade issue and ticket tracking system.Check if you run itEPSS 0.12%May 22, 2026
- Medium4.6RT is an open source, enterprise-grade issue and ticket tracking system.Check if you run itEPSS 0.17%May 22, 2026
- Medium5.1libheif is a HEIF and AVIF file format decoder and encoder.Check if you run itEPSS 0.30%May 22, 2026
- Medium6.5libheif is a HEIF and AVIF file format decoder and encoder.Check if you run itEPSS 0.25%May 22, 2026
- High8.7An authentication logic vulnerability in multiple TP-Link range extenders allows an unauthenticated attacker on an adjacent network to manipulate a login parameter and…Check if you run itEPSS 0.40%May 22, 2026
- High8.8The MLX inference backend in Docker Model Runner on macOS uses the MLX-LM library, which unconditionally imports and executes arbitrary Python files from model directo…Check if you run itEPSS 0.22%May 22, 2026
- High8.8The vllm-metal inference backend in Docker Model Runner on macOS unconditionally sets trust_remote_code=True when loading model tokenizers, and runs without sandboxing.Check if you run itEPSS 0.22%May 22, 2026
Sort