Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass.Check if you run itEPSS 0.58%May 20, 2026
- Critical9.8NVIDIA TRT-LLM for any platform contains a vulnerability in RPC testing, where an attacker could cause an unsafe deserialization.Check if you run itEPSS 0.59%May 20, 2026
- High7.5NVIDIA TRT-LLM for any platform contains a vulnerability where an attacker could cause an unchecked return value to a null pointer dereference.Check if you run itEPSS 0.47%May 20, 2026
- Critical9.8NVIDIA TRT-LLM for any platform contains a deserialization vulnerability and unsafe serialized handle.Check if you run itEPSS 0.38%May 20, 2026
- Critical9.8NVIDIA TRT-LLM for any platform contains a vulnerability in MPI server, where an attacker could cause an unsafe deserialization.Check if you run itEPSS 0.57%May 20, 2026
- High8.8The Read More & Accordion plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.5.7.Check if you run itEPSS 1.31%May 20, 2026
- Critical9.8The Easy Elements for Elementor – Addons & Website Templates plugin for WordPress is vulnerable to privilege escalation via user registration in all versions up to, an…Check if you run itEPSS 0.49%May 20, 2026
- Medium4.4The Anomify AI – Anomaly Detection and Alerting plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'anomify_api_key' parameter in versions up to…Check if you run itEPSS 0.24%May 20, 2026
- Medium4.3The Bottom Bar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 0.1.7.Check if you run itEPSS 0.19%May 20, 2026
- Medium6.4The Sticky plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the shortcode attribute in versions up to and including 2.5.6.Check if you run itEPSS 0.24%May 20, 2026
- Medium5.4The Nexa Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Server-Side Request Forgery (SSRF) in versions up to…Check if you run itEPSS 0.32%May 20, 2026
- Medium6.5The Oliver POS – A WooCommerce Point of Sale (POS) plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key in all versions up to and inc…Check if you run itEPSS 0.47%May 20, 2026
- Medium6.4The 診断ジェネレータ作成プラグイン (Diagnosis Generator) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'js' parameter in versions up to and including 1.4.16.Check if you run itEPSS 0.31%May 20, 2026
- Low2.1Rsync versions before 3.4.3 contain an off-by-one out-of-bounds stack write vulnerability in the establish_proxy_connection() function in socket.c that allows network…Check if you run itEPSS 0.34%May 20, 2026
- Medium6.9Rsync version 3.4.2 and prior contain a receiver-side out-of-bounds array read vulnerability in recv_files() in receiver.c that allows a malicious rsync server to cras…Check if you run itEPSS 0.43%May 20, 2026
- High7.2Rsync version 3.4.2 and prior contain symlink race condition vulnerabilities in path-based system calls including chmod, lchown, utimes, rename, unlink, mkdir, symlink…Check if you run itEPSS 0.14%May 20, 2026
- Medium6.1Rsync version 3.4.2 and prior contain an integer overflow vulnerability in the compressed-token decoder where a 32-bit signed counter is not checked for overflow, allo…Check if you run itEPSS 0.78%May 20, 2026
- Medium6.3Rsync version 3.4.2 and prior contain an authorization bypass vulnerability in the rsync daemon's hostname-based access control list enforcement when configured with chroot.Check if you run itEPSS 0.28%May 20, 2026
- High7.5The Creative Mail – Easier WordPress & WooCommerce Email Marketing plugin for WordPress is vulnerable to SQL Injection via the 'checkout_uuid' parameter in all version…Check if you run itEPSS 0.40%May 20, 2026
- Medium6.8Microsoft is aware of a security feature bypass vulnerability in Windows publicly referred to as "YellowKey".Check if you run itEPSS 1.89%May 20, 2026
- Low2.7Modification of Assumed-Immutable Data (MAID) vulnerability in Drupal Translate Drupal with GTranslate allows Resource Location Spoofing.Check if you run itEPSS 0.24%May 19, 2026
- Medium5.3Mantis Bug Tracker (MantisBT) is an open source issue tracker.Check if you run itEPSS 0.36%May 19, 2026
- Medium5.7Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks.Check if you run itEPSS 0.27%May 19, 2026
- Medium5.3Mantis Bug Tracker (MantisBT) is an open source issue tracker.Check if you run itEPSS 0.36%May 19, 2026
- Unknownlinux, linux-aws, linux-aws-fips, linux-gcp, linux-gcp-fips, linux-gke, linux-gkeop, linux-ibm, linux-ibm-6.8, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-raspi, linux-raspi-Open the advisoryMay 19, 2026
Sort