Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.4The a3 Lazy Load plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.7.6 This is due to a regex bug in the _filte…Check if you run itEPSS 0.36%May 28, 2026
- Medium4.9A flaw was found in Keycloak.Check if you run itEPSS 0.90%May 28, 2026
- Medium4.3The Easy Digital Downloads plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.6.7.Check if you run itEPSS 0.20%May 28, 2026
- Medium6.5A flaw was found in Keycloak.Check if you run itEPSS 0.38%May 28, 2026
- High7.3A flaw was found in Keycloak's Fine-Grained Admin Permissions (FGAPv2) feature.Check if you run itEPSS 0.49%May 28, 2026
- Medium4.3A flaw was found in Keycloak.Check if you run itEPSS 0.37%May 28, 2026
- Medium4.3The FOX – Currency Switcher Professional for WooCommerce plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key in all versions up to a…Check if you run itEPSS 0.37%May 28, 2026
- High8.8The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.29.2.Check if you run itEPSS 0.75%May 28, 2026
- Critical9.0Insufficient character filtering in backup agent signing module on Comet Backup server allows authenticated tenant administrator to execute an arbitrary code on behalf…Check if you run itEPSS 0.48%May 28, 2026
- High8.6A vulnerability allowing an authenticated user with the Backup Administrator role to write arbitrary files on Linux-based Veeam Backup & Replication server.Check if you run itEPSS 0.47%May 28, 2026
- High7.2The Login No Captcha reCAPTCHA plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the superglobal in all versions up to, and including, 1.8.0.Check if you run itEPSS 0.35%May 28, 2026
- High8.5A Local Privilege Escalation (LPE) vulnerability affects Acer NitroSense software versions prior to 3.01.3052.Check if you run itEPSS 0.15%May 28, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: slip: reject VJ receive packets on instances with no rstate array slhc_init() accepts rslots == 0 a…Check if you run itEPSS 0.17%May 27, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO nf_osf_match_one() computes ctx->win…Check if you run itEPSS 0.17%May 27, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: openvswitch: cap upcall PID array size and pre-size vport replies The vport netlink reply helpers a…Check if you run itEPSS 0.13%May 27, 2026
- Medium5.5A security vulnerability has been detected in SourceCodester eDoc Doctor Appointment System 1.0.Check if you run itEPSS 0.55%May 26, 2026
- Medium6.5epa4all-client is the Java Client for epa4all / ePA 3.0 in the Telematik Infrastruktur.Check if you run itEPSS 0.24%May 26, 2026
- Critical9.1Lumiverse is a full-featured AI chat application.Check if you run itEPSS 0.66%May 26, 2026
- Medium4.8Lumiverse is a full-featured AI chat application.Check if you run itEPSS 0.18%May 26, 2026
- Medium5.5A vulnerability has been found in itsourcecode Student Transcript Processing System 1.0.Check if you run itEPSS 0.41%May 26, 2026
- Medium5.5A flaw has been found in itsourcecode Student Transcript Processing System 1.0.Check if you run itEPSS 0.41%May 26, 2026
- Medium5.5A vulnerability was detected in itsourcecode Student Transcript Processing System 1.0.Check if you run itEPSS 0.41%May 26, 2026
- High8.7Snipe-IT is an IT asset/license management system.Check if you run itEPSS 0.44%May 26, 2026
- High8.8code100x contains an authentication bypass vulnerability in the Mobile API that allows unauthenticated attackers to impersonate arbitrary users by supplying a crafted…Check if you run itEPSS 0.57%May 26, 2026
- High7.2IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0 could allow an attacker with administrative privileges to execute remote code due to exposed method that i…Check if you run itEPSS 0.50%May 26, 2026