Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3The My Calendar – Accessible Event Manager plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.7.9.Check if you run itEPSS 0.47%May 14, 2026
- Medium6.9The Angular SSR is a server-rise rendering tool for Angular applications.Check if you run itEPSS 0.30%May 13, 2026
- High7.2CubeCart is an ecommerce software solution.Check if you run itEPSS 0.54%May 13, 2026
- High8.1CubeCart is an ecommerce software solution.Check if you run itEPSS 0.20%May 13, 2026
- High8.1azureauthextension is the Azure Authenticator Extension.Check if you run itEPSS 0.33%May 13, 2026
- High8.3The HCL BigFix SCM Reporting site contains an outdated and unsupported version of the jQuery 1.x library.Check if you run itEPSS 0.21%May 13, 2026
- High7.3The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows its authentication to be bypassed.Check if you run itEPSS 0.30%May 13, 2026
- Medium5.0The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows a reflected cross site scripting (XSS) attack.Check if you run itEPSS 0.14%May 13, 2026
- Medium4.4Flight is an extensible micro-framework for PHP.Check if you run itEPSS 0.16%May 13, 2026
- Critical9.1Netty is an asynchronous, event-driven network application framework.Check if you run itEPSS 0.72%May 13, 2026
- Medium6.1Multiple command injection vulnerabilities in Palo Alto Networks PAN-OS® software enable an authenticated administrator to bypass system restrictions and run arbitrary…Check if you run itEPSS 1.40%May 13, 2026
- High8.5GitHub Copilot CLI brings AI-powered coding assistance directly to your command line.Check if you run itEPSS 0.38%May 13, 2026
- Medium5.9Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 0.20%May 13, 2026
- Medium5.5Vercel’s AI Cloud is a unified platform for building modern applications.Check if you run itEPSS 0.16%May 13, 2026
- High8.9urllib3 is an HTTP client library for Python.Check if you run itEPSS 0.88%May 13, 2026
- High8.2urllib3 is an HTTP client library for Python.Check if you run itEPSS 0.34%May 13, 2026
- High8.7protobufjs-cli is the command line add-on for protobuf.js.Check if you run itEPSS 0.36%May 13, 2026
- High8.7When a Client SSL profile is configured with Allow Dynamic Record Sizing on a UDP virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM…Check if you run itEPSS 0.46%May 13, 2026
- High8.6jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture.Check if you run itEPSS 0.71%May 13, 2026
- High7.8protobufjs-cli is the command line add-on for protobuf.js.Check if you run itEPSS 0.19%May 13, 2026
- Medium6.3NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_ssl_module module when the ssl_verify_client directive is set to "on" or "optional," and the ssl_…Check if you run itEPSS 0.69%May 13, 2026
- High8.7When SSL profiles are configured on a virtual server, undisclosed traffic can cause the virtual server to stop processing new client connections.Check if you run itEPSS 0.46%May 13, 2026
- High8.7Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in mtrudel bandit allows unauthenticated remote denial of service via worker process exhaustion.Check if you run itEPSS 0.94%May 13, 2026
- Medium6.1A use-after-free vulnerability exists in MongoDB's Field-Level Encryption (FLE) query analysis component, affecting client-side uses of mongocryptd and crypt_shared.Check if you run itEPSS 0.22%May 13, 2026
- High8.8Command injection vulnerabilities exist in the command line interface (CLI) service accessed by the PAPI protocol of AOS-8 and AOS-10 Operating Systems.Check if you run itEPSS 1.42%May 12, 2026