Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.4The WP Carousel Free plugin for WordPress is vulnerable to Stored Cross-Site Scripting via crafted fancybox attributes in all versions up to, and including, 2.7.10.Check if you run itEPSS 0.33%May 5, 2026
- Medium6.1The Blog Settings plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.0.Check if you run itEPSS 0.37%May 5, 2026
- Medium6.1The Publish 2 Ping.fm plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.Check if you run itEPSS 0.18%May 5, 2026
- Medium4.3The addfreespace plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.1.3.Check if you run itEPSS 0.24%May 5, 2026
- Medium4.3The DX Sources plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.1.Check if you run itEPSS 0.19%May 5, 2026
- Medium6.1The Zingaya Click-to-Call plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'email', 'first_name', 'last_name', and 'phone' parameters on th…Check if you run itEPSS 0.38%May 5, 2026
- Medium6.4The WP-Clippy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode in all versions up to, and including, 1.0.0.Check if you run itEPSS 0.33%May 5, 2026
- Low2.1A vulnerability was detected in CodeCanyon Perfex CRM up to 3.4.1.Check if you run itEPSS 0.36%May 4, 2026
- High7.5Boundary Community Edition and Boundary Enterprise (“Boundary”) workers are vulnerable to a denial-of-service condition during node enrollment TLS handshakes.Check if you run itEPSS 0.34%May 4, 2026
- Medium6.5Nginx UI is a web user interface for the Nginx web server.Check if you run itEPSS 0.41%May 4, 2026
- High7.5@fastify/accepts-serializer cached serializer-selection results keyed by the request Accept header without a size limit or eviction policy.Check if you run itEPSS 0.49%May 4, 2026
- High8.7n8n is an open source workflow automation platform.Check if you run itEPSS 0.65%May 4, 2026
- High8.8n8n is an open source workflow automation platform.Check if you run itEPSS 0.51%May 4, 2026
- Medium5.1n8n is an open source workflow automation platform.Check if you run itEPSS 0.29%May 4, 2026
- High7.5Prometheus is an open-source monitoring system and time series database.Check if you run itEPSS 0.35%May 4, 2026
- Medium6.5titra is an open source time tracking project.Check if you run itEPSS 0.37%May 4, 2026
- High7.2BusyBox before commit 42202bf contains a heap buffer overflow vulnerability in the DHCPv6 client (udhcpc6) DNS_SERVERS option handler in networking/udhcp/d6_dhcpc.c th…Check if you run itEPSS 0.62%May 4, 2026
- Medium4.9Velociraptor versions prior to 0.76.4 contain a resource exhaustion vulnerability in the server's agent control channel.Check if you run itEPSS 0.44%May 4, 2026
- High7.4A vulnerability has been found in Shenzhen Libituo Technology LBT-T300-HW1 up to 1.2.8.Check if you run itEPSS 0.80%May 3, 2026
- Medium6.3Reliance on Untrusted Inputs in a Security Decision vulnerability in mtrudel bandit allows unauthenticated transport-state spoofing on plaintext HTTP connections.Check if you run itEPSS 0.52%May 1, 2026
- Medium6.1Cross-Site Scripting (XSS) vulnerability was discovered in the GSVoIP web panel version 2.0.90.Check if you run itEPSS 0.35%May 1, 2026
- High8.1Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17.Check if you run itEPSS 1.91%May 1, 2026
- Medium5.3The Total Upkeep – WordPress Backup Plugin plus Restore & Migrate by BoldGrid plugin for WordPress is vulnerable to unauthorized modification of data due to a missing…Check if you run itEPSS 0.40%May 1, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger When a durable file handle su…Check if you run itEPSS 0.65%May 1, 2026
- High8.3In the Linux kernel, the following vulnerability has been resolved: ksmbd: require minimum ACE size in smb_check_perm_dacl() Both ACE-walk loops in smb_check_perm_dacl…Check if you run itEPSS 0.32%May 1, 2026