Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9When running in Appliance mode, a directory traversal vulnerability exists in an undisclosed iControl REST endpoint that may allow an authenticated attacker with admin…Check if you run itEPSS 0.89%May 13, 2026
- High7.1Joomla J2 JOBS 1.3.0 contains an authenticated SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code thr…Check if you run itEPSS 0.27%May 13, 2026
- Medium5.1Powie's WHOIS Domain Check 0.9.31 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject arbitrary JavaScript by exploi…Check if you run itEPSS 0.24%May 13, 2026
- High7.1Joomla J2 JOBS 1.3.0 contains an authenticated SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code thr…Check if you run itEPSS 0.27%May 13, 2026
- High8.7Huawei HG630 V2 router contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain administrative access by retrieving the device serial number.Check if you run itEPSS 0.36%May 13, 2026
- Medium5.1Easy2Pilot 7 contains a cross-site request forgery vulnerability that allows attackers to add unauthorized user accounts by tricking authenticated administrators into…Check if you run itEPSS 0.14%May 13, 2026
- Medium6.8WordPress Plugin ultimate-member 2.1.3 contains a local file inclusion vulnerability that allows authenticated attackers to include arbitrary files by manipulating the…Check if you run itEPSS 0.25%May 13, 2026
- Medium5.1ELECOM wireless LAN access point devices do not check if language parameter has an appropriate value.Check if you run itEPSS 0.33%May 13, 2026
- Medium4.8Stored cross-site scripting vulnerability exists in ELECOM wireless LAN access point devices.Check if you run itEPSS 0.25%May 13, 2026
- Medium6.9ELECOM wireless LAN access point devices use a hard-coded cryptographic key when creating backups of configuration files.Check if you run itEPSS 0.12%May 13, 2026
- High7.2Hitachi Vantara Pentaho Data Integration & Analytics of all versions contain a JDBC driver for H2 databases which is vulnerable to external script execution when a new…Check if you run itEPSS 0.34%May 13, 2026
- High8.1The coreActivity: Activity Logging for WordPress plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.0.Check if you run itEPSS 0.83%May 13, 2026
- Medium6.5The Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More plugin for WordPress is vulnerable to generic SQL Injection via the 's' pa…Check if you run itEPSS 0.47%May 13, 2026
- Medium4.4The Broadstreet plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.53.1 due to insufficient i…Check if you run itEPSS 0.19%May 13, 2026
- High8.5Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to gain arbitrary System Management Network (SMN) access, potentially resu…Check if you run itEPSS 0.13%May 13, 2026
- Medium5.9Missing lock bit protection for NBIO registers could allow a local admin-privileged attacker to modify MMIO routing configurations, potentially resulting in loss of SE…Check if you run itEPSS 0.12%May 13, 2026
- High7.2A Remote Code Execution vulnerability in Claris FileMaker Cloud allowed a user with Admin Console privileges to inject arbitrary operating system commands through unsa…Check if you run itEPSS 0.82%May 12, 2026
- High7.2A Remote Code Execution vulnerability in Claris FileMaker Cloud allowed a user with Admin Console privileges to bypass a front-end restriction on OS Script schedule ty…Check if you run itEPSS 0.83%May 12, 2026
- High8.8ChurchCRM is an open-source church management system.Check if you run itEPSS 0.20%May 12, 2026
- High8.1Lemur manages TLS certificate creation.Check if you run itEPSS 0.29%May 12, 2026
- High8.7Grav is a file-based Web platform.Check if you run itEPSS 0.48%May 12, 2026
- High8.2ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx.Check if you run itEPSS 0.49%May 12, 2026
- High8.4PowerSYSTEM Center REST API endpoint for device account export allows an authenticated user with limited permissions to expose sensitive information normally restricte…Check if you run itEPSS 0.21%May 12, 2026
- High8.6Wing FTP Server before 8.1.3 contains an authenticated remote code execution vulnerability in the session serialization mechanism that allows authenticated administrat…Check if you run itEPSS 2.28%May 12, 2026
- High8.6Wiki.js is an open source wiki app built on Node.js.Check if you run itEPSS 0.56%May 12, 2026