Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4Out of bounds read in PICT image importCheck if you run itEPSS 0.15%Sep 22, 2026
- Medium6.7Package URLs can be used to exfiltrate arbitrary INI file values and environment variablesCheck if you run itEPSS 0.14%Sep 22, 2026
- Medium5.4Stack buffer overflow in CFF to Type 1 font conversionCheck if you run itEPSS 0.19%Sep 22, 2026
- Medium5.4Stack buffer overflow in CFF font hint handlingCheck if you run itEPSS 0.19%Sep 22, 2026
- Medium5.4Heap buffer overflow in WMF text record importCheck if you run itEPSS 0.20%Sep 22, 2026
- UnknownCUPS: Schwachstelle ermöglicht PrivilegieneskalationOpen the advisorySep 22, 2026
- High8.8The BM Content Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the ux_cb_remove_layout_ajax() and ux_…Check if you run itEPSS 0.90%Sep 22, 2026
- Medium6.5The BM Content Builder plugin for WordPress is vulnerable to Directory Traversal in all versions up to 3.17.1 (exclusive) via the ux_cb_page_customize_save_layout_ajax() function.Check if you run itEPSS 0.79%Sep 22, 2026
- Medium5.3The Handily plugin for WordPress is vulnerable to unauthorized payment settings modification due to missing authorization checks in all versions up to, and including, 1.0.3.Check if you run itEPSS 0.32%Sep 22, 2026
- Medium5.3The PixelPlay plugin for WordPress is vulnerable to unauthorized API key deletion due to missing authorization checks in all versions up to, and including, 1.0.2.Check if you run itEPSS 0.32%Sep 22, 2026
- Medium5.3The Image Buzz plugin for WordPress is vulnerable to unauthorized API key modification due to missing authorization checks in all versions up to, and including, 1.0.3.Check if you run itEPSS 0.32%Sep 22, 2026
- High7.2ZDI-26-719: Cisco ThousandEyes Virtual Appliance DHCP Client Command Injection Remote Code Execution VulnerabilityCheck if you run itEPSS 0.48%Sep 22, 2026
- Critical9.3F5 BIG-IP APM Heap-based Buffer Overflow VulnerabilityPatch nowKEVEPSS 24.94%Sep 22, 2026
- Critical9.5Arista VeloCloud Orchestrator Improper Input Validation VulnerabilityPatch nowKEVEPSS 1.38%Sep 22, 2026
- Critical9.8Check Point Multiple Products Path Traversal VulnerabilityPatch nowKEVEPSS 91.61%Sep 22, 2026
- High8.1WordPress Core Remote File Inclusion VulnerabilityPatch nowKEVEPSS 95.77%Sep 22, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.43%Sep 22, 2026
- Unknownpixelite events_manager Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.25%Sep 22, 2026
- UnknownImproper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 0.39%Sep 22, 2026
- Medium5.3The default AEAD nonce provider for the PSA Internal Trusted Storage transform module, secure_storage_its_transform_aead_get_nonce() in subsys/secure_storage/src/its/t…Check if you run itEPSS 0.08%Sep 21, 2026
- High7.5A flaw was found in the SmallRye Fault Tolerance library, which is used by Quarkus to provide strategies like retries and circuit breakers for microservices.Check if you run itEPSS 0.63%Sep 21, 2026
- Medium5.3A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support.Check if you run itEPSS 1.20%Sep 21, 2026
- High8.1A flaw was found in pki-core.Check if you run itEPSS 0.21%Sep 21, 2026
- High8.6UVdesk core-framework before 1.1.7 contains an improper privilege management vulnerability in the editAgent endpoint that allows agents with agent-management privilege…Check if you run itEPSS 0.64%Sep 21, 2026
- Medium5.3UVdesk core-framework before 1.1.7 contains an authorization bypass vulnerability in the saved reply endpoint that allows authenticated agents to access replies restri…Check if you run itEPSS 0.42%Sep 21, 2026
Sort