Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Vvveb before 1.0.8.3 contains a stored cross-site scripting vulnerability in the customer signup flow where the Signup::addUser() controller copies raw POST username v…Check if you run itEPSS 0.22%May 14, 2026
- Medium6.3Remote Code Execution in coleam00 Archon 0.1.0.Check if you run itEPSS 0.31%May 14, 2026
- Medium4.3Buffer over-read in PostgreSQL function pg_restore_attribute_stats() accepts array values of unmatched length, which causes query planning to read past end of one array.Check if you run itEPSS 0.21%May 14, 2026
- High7.5Uncontrolled recursion in PostgreSQL SSL and GSS negotiation allows an attacker able to connect to a PostgreSQL AF_UNIX socket to achieve sustained denial of service.Check if you run itEPSS 0.60%May 14, 2026
- High8.8Symlink following in PostgreSQL pg_basebackup plain format and in pg_rewind allows an origin superuser to overwrite local files, e.g.Check if you run itEPSS 0.41%May 14, 2026
- High8.8Authorization bypass through User-Controlled key vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc.Check if you run itEPSS 0.30%May 14, 2026
- Medium5.1podinfo through 6.11.2 contains a reflected cross-site scripting vulnerability in the /echo and /api/echo endpoints where the echoHandler writes request body content d…Check if you run itEPSS 0.19%May 14, 2026
- High8.8Authorization bypass through User-Controlled key vulnerability in APPYAP Technology and Information Inc.Check if you run itEPSS 0.24%May 14, 2026
- High8.7Comarch ERP Optima client makes use of a hard-coded password for a database user.Check if you run itEPSS 0.23%May 14, 2026
- High7.5Comarch ERP Optima client connects to a database using a high privileged account regardless of an application account to which a user logs in.Check if you run itEPSS 0.11%May 14, 2026
- Critical9.8The InfusedWoo Pro plugin for WordPress is vulnerable to privilege escalation via missing authorization in all versions up to, and including, 5.1.2.Check if you run itEPSS 0.44%May 14, 2026
- Medium6.1The GLS Shipping for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'failed_orders' parameter in all versions up to, and incl…Check if you run itEPSS 0.17%May 14, 2026
- Medium5.4GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 18.11.3 that under certain conditions could have allowed an authenticated user…Check if you run itEPSS 0.19%May 14, 2026
- Medium4.3GitLab has remediated an issue in GitLab EE affecting all versions from 11.10 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that under certain conditio…Check if you run itEPSS 0.23%May 14, 2026
- Low2.7GitLab has remediated an issue in GitLab EE affecting all versions from 16.10 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that when instance-level ap…Check if you run itEPSS 0.27%May 14, 2026
- Medium4.3GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.10 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed…Check if you run itEPSS 0.23%May 14, 2026
- Medium5.4GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed…Check if you run itEPSS 0.18%May 14, 2026
- Medium4.3The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to payment bypass through user-controlled key in all versio…Check if you run itEPSS 0.42%May 14, 2026
- Medium6.5The Unlimited Elements for Elementor plugin for WordPress is vulnerable to SQL Injection via the 'data[filter_search]' parameter in the get_cat_addons AJAX action in v…Check if you run itEPSS 0.49%May 14, 2026
- Medium6.3Android App "あんしんフィルター for au" provided by KDDI CORPORATION contains Cleartext Transmission of Sensitive Information (CWE-319) vulnerability.Check if you run itEPSS 0.09%May 14, 2026
- High8.7FunnelKit funnel_builder Missing AuthorizationPatch nowKEVEPSS 0.46%May 14, 2026
- Medium6.1Microsoft Exchange Server Cross-Site Scripting VulnerabilityPatch nowKEVEPSS 70.66%May 14, 2026
- Critical10.0Cisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityPatch nowKEVEPSS 91.82%May 14, 2026
- High7.5hoppscotch is an open source API development ecosystem.Check if you run itEPSS 0.24%May 13, 2026
- High7.8gitoxide is an implementation of git written in Rust.Check if you run itEPSS 0.29%May 13, 2026
Sort