Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3Taiko AG1000-01A SMS Alert Gateway Rev 7.3 and Rev 8 contains a hard-coded credential vulnerability in the embedded web configuration interface where authentication is…Check if you run itEPSS 0.67%May 20, 2026
- Medium5.1The CSP report endpoint in MISP intended to limit logged CSP reports to 1 KB but incorrectly allowed reports up to 1 MB before truncation.Check if you run itEPSS 0.46%May 20, 2026
- High8.3A vulnerability was identified in the ShadowAttribute proposal creation workflow.Check if you run itEPSS 0.30%May 20, 2026
- High8.6Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases.Check if you run itEPSS 0.50%May 20, 2026
- Medium4.1ArcGIS Server contains an input validation weakness in the login redirection workflow.Check if you run itEPSS 0.32%May 20, 2026
- Medium5.3Prototype pollution in csv parsing logic during import can lead to untrusted file paths (but not arguments) entering shell.openExternal after specific user behavior le…Check if you run itEPSS 0.45%May 20, 2026
- High8.8Cross-Site Request Forgery (CSRF) vulnerability in InfoScale v.9.1.3 Operations Manager (VIOM) allows an attacker to force the user with an active session into clickin…Check if you run itEPSS 0.22%May 20, 2026
- Critical9.5Code Injection vulnerability in phenixdigital phoenix_storybook allows unauthenticated remote code execution via unsanitized attribute value interpolation in HEEx temp…Check if you run itEPSS 2.06%May 20, 2026
- Medium5.9Undefined behavior may result due to a race condition leading to a use-after-free violation.Check if you run itEPSS 0.80%May 20, 2026
- Low2.3Insufficient Verification of Data Authenticity in the feedback function of Mesalvo MEONA (MEONA Client and MEONA Server).Check if you run itEPSS 0.09%May 20, 2026
- Medium4.4Use of a Password Hash With Insufficient Computational Effort in Mesalvo MEONA (MEONA Server and MEONA Client) for user accounts whose password was last set under a ve…Check if you run itEPSS 0.10%May 20, 2026
- High7.8Improper Access Control vulnerability in Mesalvo MEONA (MEONA Client and MEONA Server) allows an authenticated MEONA user to access administrative functions of the MEO…Check if you run itEPSS 0.13%May 20, 2026
- Medium6.6NLnet Labs Unbound 1.16.2 up to and including version 1.25.0 has a vulnerability of the 'ghost domain names' family of attacks that could extend the ghost domain windo…Check if you run itEPSS 0.14%May 20, 2026
- Medium6.1The Correct Prices plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the $_SERVER['PHP_SELF'] variable in versions up to and including 1.0.Check if you run itEPSS 0.29%May 20, 2026
- Medium6.1The SponsorMe plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via PHP_SELF Parameter in all versions up to, and including, 0.5.2 due to insufficie…Check if you run itEPSS 0.36%May 20, 2026
- Medium6.1The LJ comments import: reloaded plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via PHP_SELF Parameter in all versions up to, and including, 0.97…Check if you run itEPSS 0.36%May 20, 2026
- Medium4.3The Remove Yellow BGBOX plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.Check if you run itEPSS 0.19%May 20, 2026
- Medium4.3The JaviBola Custom Theme Test plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.5.Check if you run itEPSS 0.20%May 20, 2026
- Medium6.1The BLOGCHAT Chat System plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.6.3.Check if you run itEPSS 0.21%May 20, 2026
- Medium4.3The Amazon Scraper plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.Check if you run itEPSS 0.23%May 20, 2026
- Medium4.3The Games Catalog plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.0.Check if you run itEPSS 0.20%May 20, 2026
- Medium6.1The VatanSMS WP SMS plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the parameter in all versions up to, and including, 1.01.Check if you run itEPSS 0.37%May 20, 2026
- Critical9.8The ProSolution WP Client plugin for WordPress is vulnerable to Arbitrary File Upload in versions up to, and including, 2.0.0.Check if you run itEPSS 1.35%May 20, 2026
- Medium4.3The Bigfishgames Syndicate plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.Check if you run itEPSS 0.19%May 20, 2026
- Medium4.3The Child Height Predictor by Ostheimer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 1.3.Check if you run itEPSS 0.20%May 20, 2026