Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.4An incorrect permission assignment for critical resource of Ivanti Secure Access Client before 22.8R6 allows a local authenticated user to read or modify sensitive log…Check if you run itEPSS 0.24%May 12, 2026
- High8.5Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to your services.Check if you run itEPSS 0.36%May 12, 2026
- High8.2Open-WebSearch is a multi-engine MCP server, CLI, and local daemon for agent web search and content retrieval.Check if you run itEPSS 0.36%May 12, 2026
- Medium5.3Attacker can use a specially crafted base64 exchange between Dovecot and Client to fake SCRAM TLS channel binding.Check if you run itEPSS 0.23%May 12, 2026
- Critical9.2Prior to 2025-11-03, well-intended users of Terraform or REST API for Google Cloud AlloyDB for PostgreSQL could have created clusters with an insecure default password…Check if you run itEPSS 0.41%May 12, 2026
- Medium5.3The Slek Gateway for WooCommerce plugin for WordPress is vulnerable to Information Exposure in version 1.0.Check if you run itEPSS 0.43%May 12, 2026
- Medium4.3The Zawgyi Embed plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.1.Check if you run itEPSS 0.19%May 12, 2026
- Medium4.3The WP-Redirection plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 1.0.3.Check if you run itEPSS 0.20%May 12, 2026
- Medium6.1The Tm – WordPress Redirection plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.Check if you run itEPSS 0.18%May 12, 2026
- Medium6.1The WP Google Maps Integration plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the parameter in all versions up to, and including, 1.2.Check if you run itEPSS 0.37%May 12, 2026
- Medium6.1The AzonPost plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the parameter in all versions up to, and including, 1.3.Check if you run itEPSS 0.36%May 12, 2026
- Medium4.3The Woo Commerce Minimum Weight plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 3.0.1.Check if you run itEPSS 0.20%May 12, 2026
- Medium6.1The Pricing Tables for WP plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.1.0.Check if you run itEPSS 0.36%May 12, 2026
- Medium4.3The Skysa Text Ticker App plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.Check if you run itEPSS 0.19%May 12, 2026
- High8.2An unauthenticated remote attacker may exhaust all available TCP connections in the CODESYS Modbus TCP Server stack if a race condition in connection handling is succe…Check if you run itEPSS 0.54%May 12, 2026
- Medium6.1SAP TAF_APPLAUNCHER within Business Server Pages allows an unauthenticated attacker to craft malicious links that, when clicked by a victim, redirects them to attacker…Check if you run itEPSS 0.29%May 12, 2026
- Medium4.7SAPUI5 (Search UI) allows an unauthenticated attacker to manipulate specific URL parameters on the Search UI to include malicious content.Check if you run itEPSS 0.32%May 12, 2026
- Medium6.1Due to a reflected cross-site scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (Applications based on Business Server Pages), an unauthenticated…Check if you run itEPSS 0.30%May 12, 2026
- Medium6.5Outline is a service that allows for collaborative documentation.Check if you run itEPSS 0.15%May 11, 2026
- High7.3Outline is a service that allows for collaborative documentation.Check if you run itEPSS 0.43%May 11, 2026
- High7.5WWBN AVideo is an open source video platform.Check if you run itEPSS 0.43%May 11, 2026
- Medium4.3Geyser is a bridge between Minecraft: Bedrock Edition and Minecraft: Java Edition.Check if you run itEPSS 0.28%May 11, 2026
- High7.2WWBN AVideo is an open source video platform.Check if you run itEPSS 0.32%May 11, 2026
- High8.8Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software.Check if you run itEPSS 0.19%May 11, 2026
- Low3.7Microdot is a minimalistic Python web framework.Check if you run itEPSS 0.34%May 11, 2026