Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8The ProSolution WP Client plugin for WordPress is vulnerable to Arbitrary File Upload in versions up to, and including, 2.0.0.Check if you run itEPSS 1.35%May 20, 2026
- Medium4.3The Bigfishgames Syndicate plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.Check if you run itEPSS 0.19%May 20, 2026
- Medium4.3The Child Height Predictor by Ostheimer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 1.3.Check if you run itEPSS 0.20%May 20, 2026
- Medium6.1The Sentence To SEO (keywords, description and tags) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.Check if you run itEPSS 0.21%May 20, 2026
- Low2.1Rsync versions before 3.4.3 contain an off-by-one out-of-bounds stack write vulnerability in the establish_proxy_connection() function in socket.c that allows network…Check if you run itEPSS 0.35%May 20, 2026
- Medium6.9Rsync version 3.4.2 and prior contain a receiver-side out-of-bounds array read vulnerability in recv_files() in receiver.c that allows a malicious rsync server to cras…Check if you run itEPSS 0.46%May 20, 2026
- Medium6.1Template::Plugin::HTML versions before 3.103 for Perl allows HTML and JavaScript to be injected.Check if you run itEPSS 0.34%May 19, 2026
- Medium6.5Faraday is an HTTP client library abstraction layer that provides a common interface over many adapters.Check if you run itEPSS 0.29%May 19, 2026
- Medium5.9NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform.Check if you run itEPSS 0.53%May 19, 2026
- High8.7Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via the webhook_url parameter in the file scan endpoint (POST /v1/{iac}/{iacVersion}/{…Check if you run itEPSS 0.61%May 19, 2026
- Critical9.2NGINX JavaScript has a vulnerability when the js_fetch_proxy directive is configured with at least one client-controlled NGINX variable (for example, $http_*, $arg_*,…Check if you run itEPSS 0.79%May 19, 2026
- Critical9.6A critical Remote Code Execution (RCE) vulnerability was identified in the server-side template rendering mechanism used by the Glassfish gadget handler.Check if you run itEPSS 0.67%May 19, 2026
- Critical9.1An authenticated Remote Code Execution (RCE) vulnerability was identified in GlassFish's Administration Console.Check if you run itEPSS 0.83%May 19, 2026
- High7.7Sparx Pro Cloud Server is vulnerable to a Race Condition in the /data_api/dl_internal_artifact.php endpoint.Check if you run itEPSS 0.66%May 19, 2026
- High8.7Sparx Enterprise Architect software has a security feature that limits user's actions to those specified in the role.Check if you run itEPSS 0.43%May 19, 2026
- High7.1A flaw was found in Keycloak.Check if you run itEPSS 0.50%May 19, 2026
- High7.5A session fixation vulnerability was found in Keycloak's login-actions endpoints.Check if you run itEPSS 1.10%May 19, 2026
- High8.1A flaw was found in Keycloak's URL validation logic during redirect operations.Check if you run itEPSS 0.50%May 19, 2026
- Medium6.8A flaw was found in Keycloak.Check if you run itEPSS 0.38%May 19, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: qrtr: ns: Limit the maximum server registration per node Current code does no bound checking o…Check if you run itEPSS 0.15%May 19, 2026
- Medium6.5A flaw was found in Keycloak.Check if you run itEPSS 0.41%May 19, 2026
- Medium4.9A flaw was found in Keycloak.Check if you run itEPSS 0.46%May 19, 2026
- Medium5.4A flaw was found in Keycloak.Check if you run itEPSS 0.32%May 19, 2026
- Medium4.3A flaw was found in Keycloak.Check if you run itEPSS 0.44%May 19, 2026
- High7.8Mullvad VPN is a VPN client app for desktop and mobile.Check if you run itEPSS 0.12%May 19, 2026