Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9WWBN AVideo is an open source video platform.Check if you run itEPSS 0.59%May 29, 2026
- Medium5.3WWBN AVideo is an open source video platform.Check if you run itEPSS 0.32%May 29, 2026
- High8.5FreePBX is an open source IP PBX.Check if you run itEPSS 0.53%May 29, 2026
- Critical10.0Incorrect permission settings on a critical resource in Suprema BioStar 2 (versions 2.9.3 through 2.9.11) that allow backup files to be publicly exposed when the admin…Check if you run itEPSS 0.55%May 29, 2026
- Medium5.1Group-Office is an enterprise customer relationship management and groupware tool.Check if you run itEPSS 0.39%May 29, 2026
- Critical9.3RustFS is a distributed object storage system built in Rust.Check if you run itEPSS 0.35%May 29, 2026
- Medium5.4A stored Cross-Site Scripting (XSS) vulnerability exists in the project selector component of Mautic 7.Check if you run itEPSS 0.23%May 29, 2026
- High7.6A stored Cross-Site Scripting (XSS) vulnerability exists in the Projects component of Mautic 7.Check if you run itEPSS 0.29%May 29, 2026
- High8.6Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Wat…Check if you run itEPSS 0.88%May 29, 2026
- High8.8Nozomi Networks Labs identified a CWE-23: Relative Path Traversal in the Administration WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that a…Check if you run itEPSS 0.44%May 29, 2026
- High8.5Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Wat…Check if you run itEPSS 0.88%May 29, 2026
- High8.6Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Wat…Check if you run itEPSS 0.88%May 29, 2026
- High8.6Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Wat…Check if you run itEPSS 0.88%May 29, 2026
- High8.1The Media Library Assistant plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.35 This is due to missing nonce verifi…Check if you run itEPSS 0.32%May 29, 2026
- High7.5CORS misconfiguration in the REST API of Network Optix Nx Witness VMS before version 6.1.2, when running in the default Standard security mode, on Linux and Windows al…Check if you run itEPSS 0.24%May 29, 2026
- Medium4.9The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to generic SQL Injection via the 'order' parameter in all versions up to, and including, 3.28.28 du…Check if you run itEPSS 0.29%May 29, 2026
- Critical9.8The OTP Login With Phone Number, OTP Verification plugin for WordPress is vulnerable to authentication bypass in versions 1.8.50 through 1.8.60.Check if you run itEPSS 0.90%May 29, 2026
- Medium5.3The Breeze plugin for WordPress is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in all versions up to, and including, 2.5.2 This is due to…Check if you run itEPSS 0.27%May 29, 2026
- Medium4.4The Post Snippets plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 4.0.19.Check if you run itEPSS 0.36%May 29, 2026
- Critical9.8Missing Authentication for Critical FunctionPatch nowKEVEPSS 1.86%May 29, 2026
- Critical9.8acfextended advanced_custom_fields_extended Improper Privilege ManagementPatch nowKEVEPSS 0.87%May 28, 2026
- Medium5.1An access bypass vulnerability in Drupal TFA Basic Plugins allows users with the administer users permission to view or generate recovery codes for other users.Check if you run itEPSS 0.39%May 28, 2026
- High8.5LinkAce is a self-hosted archive to collect website links.Check if you run itEPSS 0.49%May 28, 2026
- Medium6.0Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments.Check if you run itEPSS 0.38%May 28, 2026
- High7.7Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments.Check if you run itEPSS 0.46%May 28, 2026