Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.1A weakness has been identified in Tenda AC6 15.03.06.23.Check if you run itEPSS 3.18%May 11, 2026
- Low1.9A vulnerability was identified in Devs Palace ERP Online up to 4.0.0.Check if you run itEPSS 0.20%May 11, 2026
- Low1.9A weakness has been identified in Devs Palace ERP Online up to 4.0.0.Check if you run itEPSS 0.20%May 11, 2026
- Low1.9A vulnerability was identified in Devs Palace ERP Online up to 4.0.0.Check if you run itEPSS 0.20%May 11, 2026
- UnknownUse-of-uninitialized-value in jxl::PerformMulBlendingOpen the advisoryMay 11, 2026
- High7.8Linux Kernel Out-of-bounds WritePatch nowKEVEPSS 94.12%May 11, 2026
- High7.5XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences.Check if you run itEPSS 0.65%May 10, 2026
- Medium6.5Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass.Check if you run itEPSS 0.31%May 10, 2026
- Medium5.1WordPress Plugin AAWP 3.16 contains a reflected cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by manipulating the…Check if you run itEPSS 0.17%May 10, 2026
- Medium5.1uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the backend/mailingLog/manage module.Check if you run itEPSS 0.25%May 10, 2026
- Medium5.1uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the auctions/manage module.Check if you run itEPSS 0.25%May 10, 2026
- Medium5.1uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the tickets/manage module.Check if you run itEPSS 0.25%May 10, 2026
- Medium5.1uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the news/manage module.Check if you run itEPSS 0.25%May 10, 2026
- Medium5.1uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the posts/manage module.Check if you run itEPSS 0.25%May 10, 2026
- Medium5.1uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the auctions/myAuctions/status/loose module.Check if you run itEPSS 0.25%May 10, 2026
- Medium5.1uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the auctions/myAuctions/status/active module.Check if you run itEPSS 0.25%May 10, 2026
- Medium5.1uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the orders/myOrders module.Check if you run itEPSS 0.25%May 10, 2026
- Medium5.1WordPress Plugin IP2Location Country Blocker 2.26.7 contains a stored cross-site scripting vulnerability that allows authenticated users to inject arbitrary JavaScript…Check if you run itEPSS 0.19%May 10, 2026
- Medium5.1WordPress International SMS for Contact Form 7 Integration version 1.2 contains a reflected cross-site scripting vulnerability in the page parameter of the admin setti…Check if you run itEPSS 0.19%May 10, 2026
- Medium5.1WordPress Contact Form Builder 1.6.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by explo…Check if you run itEPSS 0.21%May 10, 2026
- Medium5.1WordPress Plugin Jetpack 9.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating…Check if you run itEPSS 0.20%May 10, 2026
- Medium5.1Drupal avatar_uploader 7.x-1.0-beta8 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manip…Check if you run itEPSS 0.24%May 10, 2026
- Medium6.9WordPress Plugin amministrazione-aperta 3.7.3 contains a local file read vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting insu…Check if you run itEPSS 0.15%May 10, 2026
- Medium5.3WordPress Plugin Curtain 1.0.2 contains a cross-site request forgery vulnerability that allows attackers to activate or deactivate site maintenance mode by crafting ma…Check if you run itEPSS 0.13%May 10, 2026
- Medium6.9WordPress Plugin cab-fare-calculator 1.0.3 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating…Check if you run itEPSS 0.39%May 10, 2026
Sort