Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.…Check if you run itEPSS 0.10%Apr 8, 2026
- Medium5.5A new API endpoint introduced in pretix 2025 that is supposed to return all check-in events of a specific event in fact returns all check-in events belonging to the re…Check if you run itEPSS 0.26%Apr 8, 2026
- Medium5.5Dell Elastic Cloud Storage, version 3.8.1.7 and prior, and Dell ObjectScale, versions prior to 4.1.0.3 and version 4.2.0.0, contains an Insertion of Sensitive Informat…Check if you run itEPSS 0.11%Apr 8, 2026
- High7.8Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.1.6 and versions 9.11.0.0 through 9.13.0.1, contains an incorrect privilege assignment vulnerability.Check if you run itEPSS 0.09%Apr 8, 2026
- Medium4.4Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.1.6 and versions 9.11.0.0 through 9.13.0.0, contains a generation of error message containing sensitive informatio…Check if you run itEPSS 0.16%Apr 8, 2026
- Medium5.5Dell PowerProtect Agent Service, version(s) prior to 20.1, contain(s) an Incorrect Permission Assignment for Critical Resource vulnerability.Check if you run itEPSS 0.13%Apr 8, 2026
- Medium6.5The User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder plugin for Wor…Check if you run itEPSS 0.31%Apr 8, 2026
- Medium6.4The Robo Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Loading Label' setting in all versions up to, and including, 5.1.3.Check if you run itEPSS 0.43%Apr 8, 2026
- Medium5.3Missing Authorization vulnerability in mailercloud Mailercloud – Integrate webforms and synchronize website contacts mailercloud-integrate-webforms-synchronize-contact…Check if you run itEPSS 0.19%Apr 8, 2026
- Medium5.3Missing Authorization vulnerability in massiveshift AI Workflow Automation ai-workflow-automation-lite allows Exploiting Incorrectly Configured Access Control Security…Check if you run itEPSS 0.18%Apr 8, 2026
- Medium5.3Missing Authorization vulnerability in HBSS Technologies MAIO – The new AI GEO / SEO tool maio-the-new-ai-geo-seo-tool allows Exploiting Incorrectly Configured Access…Check if you run itEPSS 0.18%Apr 8, 2026
- Medium5.3Missing Authorization vulnerability in Unitech Web UnitechPay unitechpay-paiements-mobile-money allows Exploiting Incorrectly Configured Access Control Security Levels…Check if you run itEPSS 0.21%Apr 8, 2026
- Medium5.3Insertion of Sensitive Information Into Sent Data vulnerability in Ateeq Rafeeq RepairBuddy computer-repair-shop allows Retrieve Embedded Sensitive Data.This issue aff…Check if you run itEPSS 0.24%Apr 8, 2026
- Medium4.3Missing Authorization vulnerability in Jordy Meow AI Engine (Pro) ai-engine-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe…Check if you run itEPSS 0.17%Apr 8, 2026
- Medium5.3Missing Authorization vulnerability in Craig Hewitt Seriously Simple Podcasting seriously-simple-podcasting allows Exploiting Incorrectly Configured Access Control Sec…Check if you run itEPSS 0.22%Apr 8, 2026
- High7.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in YayCommerce YayMail yaymail allows Blind SQL Injection.This issue…Check if you run itEPSS 0.28%Apr 8, 2026
- High7.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Brainstorm Force OttoKit suretriggers allows Blind SQL Injection.…Check if you run itEPSS 0.28%Apr 8, 2026
- Medium4.3Missing Authorization vulnerability in Brainstorm Force CartFlows cartflows allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects…Check if you run itEPSS 0.22%Apr 8, 2026
- Medium5.5Server-Side Request Forgery (SSRF) vulnerability in SeedProd Coming Soon Page, Under Construction & Maintenance Mode by SeedProd coming-soon allows Server Side Request…Check if you run itEPSS 0.19%Apr 8, 2026
- Medium6.9Movable Type provided by Six Apart Ltd.Check if you run itEPSS 0.35%Apr 8, 2026
- Critical9.3Movable Type provided by Six Apart Ltd.Check if you run itEPSS 0.65%Apr 8, 2026
- Medium6.4The Element Pack Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the SVG Image Widget in versions up to and including 8.4.2.Check if you run itEPSS 0.39%Apr 8, 2026
- Medium5.3The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 6.3.7.Check if you run itEPSS 0.33%Apr 8, 2026
- High7.0An exposed IOCTL with an insufficient access control vulnerability has been identified in the utility, MxGeneralIo, for Moxa’s industrial x86 computers.Check if you run itEPSS 0.30%Apr 8, 2026
- Medium4.3The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to authorization bypass through user-controlled key in all versions up to, and i…Check if you run itEPSS 0.54%Apr 8, 2026
Sort