Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.4undici is an HTTP client library for Node.js.Check if you run itEPSS 0.15%Oct 15, 2026
- Medium5.3Missing Authorization vulnerability in WP Sunshine Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This…Check if you run itEPSS 0.23%Oct 15, 2026
- High7.4undici is an HTTP client library for Node.js.Check if you run itEPSS 0.18%Oct 15, 2026
- Medium5.4The Hub collection module documentation renderer in the unified Ansible Automation Platform UI (built from upstream ansible-ui, frontend/hub) renders a documentation U…Check if you run itEPSS 0.17%Oct 15, 2026
- Medium5.3Missing Authorization vulnerability in WebberZone Knowledge Base knowledgebase allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec…Check if you run itEPSS 0.25%Oct 15, 2026
- High7.4A flaw was found in the internal WebAssembly (WASM) shim used by the Kuadrant operator.Check if you run itEPSS 0.33%Oct 15, 2026
- Medium6.0temporal-proxy 0.2.0 through 0.8.0 does not bind encrypted payloads to the namespace they were encrypted for.Check if you run itEPSS 0.36%Oct 15, 2026
- Medium6.1ELADMIN v2.7 and before is vulnerable to Cross Site Scripting (XSS) via the component WebSocketServer, SpringSecurityConfig, deploy.vue.Check if you run itEPSS 0.19%Oct 15, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITH YITH WooCommerce Compare yith-woocommerce-compare allows Sto…Check if you run itEPSS 0.16%Oct 15, 2026
- High7.2HtmlUnit Neko is an HtmlUnit adaptation of NekoHTML.Check if you run itEPSS 0.26%Oct 15, 2026
- Medium5.4Authorization Bypass Through User-Controlled Key vulnerability in ELEXtensions ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes elex-bulk-edit-product…Check if you run itEPSS 0.23%Oct 15, 2026
- Critical9.1joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standards.Check if you run itEPSS 0.12%Oct 15, 2026
- High8.1Vulnity Security <= 1.4.3 - Unauthenticated Authentication Bypass to Administrator via Exposed Pairing CredentialsCheck if you run itEPSS 0.50%Oct 15, 2026
- Medium5.9undici is an HTTP client library for Node.js.Check if you run itEPSS 0.25%Oct 15, 2026
- High7.5undici is an HTTP client library for Node.js.Check if you run itEPSS 0.18%Oct 15, 2026
- Medium6.9Unvalidated HTTP/1 request-target authority lets a client choose conn.host and conn.port in BanditCheck if you run itEPSS 0.48%Oct 15, 2026
- Medium6.1Scoold is a Q&A and a knowledge sharing platform for teams.Check if you run itEPSS 0.23%Oct 15, 2026
- High8.7GYM One is open-source gym management software for fitness centers, personal trainers, and sports clubs.Check if you run itEPSS 0.23%Oct 15, 2026
- Medium6.5GYM One is open-source gym management software for fitness centers, personal trainers, and sports clubs.Check if you run itEPSS 0.34%Oct 15, 2026
- Medium6.3AliasVault is a privacy-first password manager with built-in email aliasing.Check if you run itEPSS 0.19%Oct 15, 2026
- Medium6.5NL Portal Backend Libraries provide backend components for Dutch government portals that interact with residents, customers, suppliers, and partner organizations.Check if you run itEPSS 0.33%Oct 15, 2026
- Medium5.4Missing Authorization vulnerability in WordLift Srl WordLift wordlift allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordLi…Check if you run itEPSS 0.17%Oct 15, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetSmartFilters jet-smart-filters allows Stored XSS.Th…Check if you run itEPSS 0.16%Oct 15, 2026
- Medium4.3Missing Authorization vulnerability in Meow Apps AI Engine ai-engine allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Engi…Check if you run itEPSS 0.18%Oct 15, 2026
- Medium6.3Authorization Bypass Through User-Controlled Key vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Conf…Check if you run itEPSS 0.20%Oct 15, 2026