Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownpython313-3.13.16-1.1 on GA mediaOpen the advisoryOct 13, 2026
- Unknownpython312-3.12.15-1.1 on GA mediaOpen the advisoryOct 13, 2026
- Unknownpython311-3.11.17-1.1 on GA mediaOpen the advisoryOct 13, 2026
- Unknownpython313-vllm-0.30.0-2.1 on GA mediaOpen the advisoryOct 13, 2026
- Unknownpython313-urllib3_1-1.26.20-8.1 on GA mediaOpen the advisoryOct 13, 2026
- Unknownpython313-sglang-0.5.21-2.1 on GA mediaOpen the advisoryOct 13, 2026
- Unknownpython313-multidict-7.0.0-1.1 on GA mediaOpen the advisoryOct 13, 2026
- Unknownfirefox-esr-153.5.0-1.1 on GA mediaOpen the advisoryOct 13, 2026
- Unknownfetchmail-6.6.8-1.1 on GA mediaOpen the advisoryOct 13, 2026
- Unknownalloy-1.20.1-1.1 on GA mediaOpen the advisoryOct 13, 2026
- UnknownMalicious code in monkey-tags-ip (npm)Open the advisoryOct 13, 2026
- UnknownMalicious code in @user-interface-common/common-styles (npm)Open the advisoryOct 13, 2026
- UnknownMalicious code in @newspage/libx-amount (npm)Open the advisoryOct 13, 2026
- UnknownMalicious code in @newspage/lib-ng-async-routes-ui (npm)Open the advisoryOct 13, 2026
- UnknownMalicious code in @mntv-analysis/workspaces-components (npm)Open the advisoryOct 13, 2026
- UnknownMalicious code in @mntv-analysis/ui-components (npm)Open the advisoryOct 13, 2026
- UnknownMalicious code in @mntv-analysis/ui (npm)Open the advisoryOct 13, 2026
- MediumThe GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode in versions up to, a…Check if you run itEPSS 0.21%Oct 13, 2026
- MediumThe FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Unquoted popup Shortcode Attribute in all versions up to, and incl…Check if you run itEPSS 0.23%Oct 13, 2026
- MediumThe Email Marketing for WordPress and WooCommerce – Retainful plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data' parameter in all version…Check if you run itEPSS 0.19%Oct 13, 2026
- MediumThe SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.74.3 via the get_instance_css function.Check if you run itEPSS 0.71%Oct 13, 2026
- MediumThe Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Stored Cross-Site Scripting via the user profile 'Author Page' social link…Check if you run itEPSS 0.15%Oct 13, 2026
- High8.7The network messaging layer contained improper handling of highly compressed data affecting service availability.Check if you run itEPSS 0.36%Oct 13, 2026
- High7.1QAPI contained a stack-based buffer overflow affecting service availability.Check if you run itEPSS 0.24%Oct 13, 2026
- HighImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Greg Winiarski WPAdverts wpadverts allows Reflected XSS.This issu…Check if you run itEPSS 0.15%Oct 13, 2026
Sort