Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.6gravityforms gravity_forms Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.47%Jun 1, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThimPress LearnPress allows Reflected XSS.Check if you run itEPSS 0.20%Jun 1, 2026
- High7.1VeronaLabs wp_statistics Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.21%Jun 1, 2026
- Medium5.1Lightweight Music Server (LMS) though 3.76.0 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary JavaScript by embedding ma…Check if you run itEPSS 0.17%Jun 1, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp VikBooking Hotel Booking Engine & PMS allows DOM-Based XSS.Check if you run itEPSS 0.14%Jun 1, 2026
- Critical9.1Missing Authorization vulnerability in Tomdever wpForo Forum allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.29%Jun 1, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in E2Pdf.Com e2pdf allows Reflected XSS.Check if you run itEPSS 0.14%Jun 1, 2026
- Critical9.8Incorrect Privilege Assignment vulnerability in Wasiliy Strecker / ContestGallery developer Contest Gallery Pro allows Privilege Escalation.Check if you run itEPSS 0.33%Jun 1, 2026
- High8.7Use of hard-coded credentials in KS-SOMED allowed an unauthorized attacker access to FTP server that hosted the application's update packages.Check if you run itEPSS 0.36%Jun 1, 2026
- High7.5FlexRIC v2.0.0 crashes when receiving a RIC_SUBSCRIPTION_RESPONSE with an unknown ric_id that has no corresponding pending event.Check if you run itEPSS 0.35%Jun 1, 2026
- High7.5FlexRIC v2.0.0 crashes when an SCTP association is closed before an E2_SETUP_REQUEST is sent.Check if you run itEPSS 0.35%Jun 1, 2026
- Medium5.0A flaw was found in OpenShift Container Platform.Check if you run itEPSS 0.23%Jun 1, 2026
- Low1.9A security flaw has been discovered in janet-lang janet up to 1.41.0.Check if you run itEPSS 0.12%Jun 1, 2026
- Low2.1A vulnerability was identified in itsourcecode Content Management System 1.0.Check if you run itEPSS 0.20%Jun 1, 2026
- Low2.0A vulnerability was determined in lharries whatsapp-mcp 0.0.1.Check if you run itEPSS 0.27%Jun 1, 2026
- Medium5.5A vulnerability was found in SourceCodester Computer Repair Shop Management System up to 1.0.Check if you run itEPSS 0.27%Jun 1, 2026
- Medium5.5A vulnerability has been found in code-projects Real State Services 1.0.Check if you run itEPSS 0.27%Jun 1, 2026
- Medium5.5A flaw has been found in CodeAstro Online Job Portal 1.0.Check if you run itEPSS 0.26%Jun 1, 2026
- Medium5.5A vulnerability was detected in CodeAstro Online Job Portal 1.0.Check if you run itEPSS 0.26%Jun 1, 2026
- High7.4A security vulnerability has been detected in H3C Magic B0 up to 100R002.Check if you run itEPSS 0.48%Jun 1, 2026
- Critical9.2In certain scenarios when the admin has enabled Interactive Connectivity Establishment (ICE), a buffer overflow could enable remote code execution on Poly Voice produc…Check this weekEPSS 32.23%Jun 1, 2026
- Medium5.5A segmentation violation in the gf_media_get_color_info function (/media_tools/isom_tools.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial o…Check if you run itEPSS 0.13%Jun 1, 2026
- Medium5.5A heap use-after-free in the dasher_process function (/filters/dasher.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) via…Check if you run itEPSS 0.13%Jun 1, 2026
- Medium5.5A segmentation violation in the gf_isom_apple_set_tag_ex function (/isomedia/isom_write.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of…Check if you run itEPSS 0.14%Jun 1, 2026
- Medium5.5A NULL pointer dereference in the gf_ac4_pres_b_4_back_channels_present function (/media_tools/av_parsers.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to…Check if you run itEPSS 0.14%Jun 1, 2026
Sort