Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5A vulnerability has been found in SourceCodester Hospitals Patient Records Management System 1.0.Check if you run itEPSS 0.41%May 24, 2026
- Low2.1A security flaw has been discovered in SourceCodester Hospitals Patient Records Management System 1.0.Check if you run itEPSS 0.32%May 23, 2026
- High8.7D-Link DIR601 2.02NA contains a credential disclosure vulnerability that allows unauthenticated attackers to retrieve sensitive configuration data by manipulating the…Check if you run itEPSS 0.58%May 23, 2026
- High7.1WordPress Ultimate Form Builder Lite plugin version 1.3.7 and below contains an SQL injection vulnerability that allows authenticated attackers to manipulate database…Check if you run itEPSS 0.21%May 23, 2026
- Medium5.1userSpice 4.3.24 contains a cross-site scripting vulnerability that allows attackers to inject malicious scripts through the X-Forwarded-For HTTP header.Check if you run itEPSS 0.15%May 23, 2026
- Medium5.3Smartshop 1 contains a cross-site request forgery vulnerability that allows attackers to modify user profiles by tricking authenticated users into submitting malicious requests.Check if you run itEPSS 0.13%May 23, 2026
- High8.8The Wishlist Member plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'WishListMember3_Hooks::generate_a…Check if you run itEPSS 0.44%May 23, 2026
- High8.8The Wishlist Member plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'WishListMember\Features\Team_Acco…Check if you run itEPSS 0.44%May 23, 2026
- High8.8Improper Privilege ManagementPatch nowKEVEPSS 0.45%May 23, 2026
- High8.8The WishList Member plugin for WordPress is vulnerable to Privilege Escalation via Missing Authorization in versions up to and including 3.30.1.Check if you run itEPSS 0.44%May 23, 2026
- High8.7NukeViet CMS is a multi Content Management System.Check if you run itEPSS 0.61%May 22, 2026
- High8.7An authentication logic vulnerability in multiple TP-Link range extenders allows an unauthenticated attacker on an adjacent network to manipulate a login parameter and…Check if you run itEPSS 0.57%May 22, 2026
- High8.8The Docker CLI --use-api-socket flag bypasses Enhanced Container Isolation (ECI) restrictions in Docker Desktop.Check if you run itEPSS 0.20%May 22, 2026
- High8.1authentik is an open-source identity provider.Check if you run itEPSS 0.72%May 22, 2026
- High7.1authentik is an open-source identity provider.Check if you run itEPSS 0.56%May 22, 2026
- Medium5.4Missing authorization in the entry status management feature in Devolutions Server allows a non-administrator authenticated user to bypass the administrator-enforced P…Check if you run itEPSS 0.24%May 22, 2026
- Low2.4Insufficient logging in the entry export feature in Devolutions Server allows an authenticated user with export permissions to export a sealed entry without triggering…Check if you run itEPSS 0.27%May 22, 2026
- Medium6.7Dell VxRail versions before 7.0.200 contain a Plain-text Password Storage Vulnerability in VxRail Manager.Check if you run itEPSS 0.12%May 22, 2026
- High7.5The Ditty – Responsive News Tickers, Sliders, and Lists plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.1.65.Check if you run itEPSS 0.59%May 22, 2026
- Medium5.4A broken access control vulnerability exists in the TeamViewer DEX Platform (On‑Premises) prior version 9.2.Check if you run itEPSS 0.23%May 22, 2026
- Medium4.3The Slider by Soliloquy – Responsive Image Slider for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and includi…Check if you run itEPSS 0.42%May 22, 2026
- Medium4.3The Widget Context plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.3.Check if you run itEPSS 0.20%May 22, 2026
- High8.8The Easy Elements for Elementor – Addons & Website Templates plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.4.5 via…Check if you run itEPSS 0.80%May 22, 2026
- Medium6.1The CBX 5 Star Rating & Review plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.0.…Check if you run itEPSS 0.37%May 22, 2026
- Medium4.3The Alfie – Feed Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.1.Check if you run itEPSS 0.19%May 22, 2026