Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.8ITS Intelligent SCADA System developed by ITP Technology has a Stored Cross-Site Scripting vulnerability, allowing privileged remote attackers to inject persistent Jav…Check if you run itEPSS 0.18%May 29, 2026
- Medium4.8ITS Intelligent SCADA System developed by ITP Technology has a Stored Cross-Site Scripting vulnerability, allowing privileged remote attackers to inject persistent Jav…Check if you run itEPSS 0.18%May 29, 2026
- High7.5CORS misconfiguration in the REST API of Network Optix Nx Witness VMS before version 6.1.2, when running in the default Standard security mode, on Linux and Windows al…Check if you run itEPSS 0.24%May 29, 2026
- Medium4.1A flaw was found in the Quay config-tool's LDAP and SMTP validation functions.Check if you run itEPSS 0.19%May 29, 2026
- Medium4.9The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to generic SQL Injection via the 'order' parameter in all versions up to, and including, 3.28.28 du…Check if you run itEPSS 0.29%May 29, 2026
- Medium6.4The Plus Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'carousel_direction' parameter of the Carousel Anything widget…Check if you run itEPSS 0.27%May 29, 2026
- High7.1An SQL injection vulnerability exists in Mautic's API contact filtering mechanism.Check if you run itEPSS 0.22%May 29, 2026
- Medium4.1Weak authentication in the Wireless Control Module (WCM) of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker with read acc…Check if you run itEPSS 0.10%May 29, 2026
- Critical9.8The OTP Login With Phone Number, OTP Verification plugin for WordPress is vulnerable to authentication bypass in versions 1.8.50 through 1.8.60.Check if you run itEPSS 0.51%May 29, 2026
- Medium6.4The Simple Divi Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter of the [showmodule] shortcode in versions up to, and…Check if you run itEPSS 0.20%May 29, 2026
- High7.1Service Center developed by BankPro E-Service Technology has an Insecure Direct Object Reference vulnerability, allowing authenticated remote attackers to modify the p…Check if you run itEPSS 0.26%May 29, 2026
- Medium4.8A flaw was found in libsoup.Check if you run itEPSS 0.87%May 29, 2026
- Medium6.4The StatCounter – Free Real Time Visitor Stats plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.1.1 This is due to…Check if you run itEPSS 0.30%May 29, 2026
- Medium6.4The Automotive Car Dealership Business WordPress Theme for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Project Details' custom field in Portfolio I…Check if you run itEPSS 0.16%May 29, 2026
- High8.8The WooCommerce Infinite Scroll and Ajax Pagination plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.8 via the 'setti…Check if you run itEPSS 0.38%May 29, 2026
- Medium5.3The Breeze plugin for WordPress is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in all versions up to, and including, 2.5.2 This is due to…Check if you run itEPSS 0.27%May 29, 2026
- Medium4.3The Poll Maker – Versus Polls, Anonymous Polls, Image Polls plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to and including 6.3.7.Check if you run itEPSS 0.28%May 29, 2026
- Medium4.4The Post Snippets plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 4.0.19.Check if you run itEPSS 0.24%May 29, 2026
- High7.3Incorrect permission assignment for a critical resource in Armoury Crate allows a local user to bypass the driver’s validation mechanism, resulting in unauthorized rea…Check if you run itEPSS 0.09%May 29, 2026
- High7.3An Incorrect Permission Assignment for Critical Resource vulnerability in ASUS System Control Interface allows a local user to elevate privileges to SYSTEM and execute…Check if you run itEPSS 0.14%May 29, 2026
- Medium5.1Improper handling of symbolic links in the installer of CUPS Printer Driver for macOS(*) may allow a local attacker with login privileges to exploit a specially crafte…Check if you run itEPSS 0.12%May 29, 2026
- Medium5.1Improper handling of symbolic links in the installer of My Image Garden for macOS Version 3.6.8 or earlier may allow a local attacker with login privileges to exploit…Check if you run itEPSS 0.12%May 29, 2026
- Critical9.8Missing Authentication for Critical FunctionPatch nowKEVEPSS 20.39%May 29, 2026
- High7.2linkwhisper link_whisper_free Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.24%May 29, 2026
- High8.8Inappropriate implementation in ANGLE in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Check if you run itEPSS 0.25%May 28, 2026
Sort