Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Unauthenticated Broken Access Control in Appointment Hour Booking <= 1.5.91 versions.Check if you run itEPSS 0.35%Aug 18, 2026
- High7.1Unauthenticated Cross Site Scripting (XSS) in Templately <= 3.7.1 versions.Check if you run itEPSS 0.25%Aug 18, 2026
- Medium6.5Contributor Cross Site Scripting (XSS) in WP Tab Widget <= 1.2.11 versions.Check if you run itEPSS 0.22%Aug 18, 2026
- Medium6.5Contributor Cross Site Scripting (XSS) in Table Of Contents Block <= 1.5.0 versions.Check if you run itEPSS 0.22%Aug 18, 2026
- Medium6.5Contributor Cross Site Scripting (XSS) in Typing Effect <= 1.3.7 versions.Check if you run itEPSS 0.22%Aug 18, 2026
- Medium6.5Contributor Cross Site Scripting (XSS) in Wufoo Shortcode <= 1.55 versions.Check if you run itEPSS 0.22%Aug 18, 2026
- Medium6.5Contributor Cross Site Scripting (XSS) in Video Conferencing with Zoom <= 4.6.8 versions.Check if you run itEPSS 0.22%Aug 18, 2026
- Medium6.5Contributor Cross Site Scripting (XSS) in Login With Ajax <= 4.5.1 versions.Check if you run itEPSS 0.22%Aug 18, 2026
- Medium6.5Contributor Cross Site Scripting (XSS) in WPZOOM Forms – Contact Form Plugin for Gutenberg <= 2.0.4 versions.Check if you run itEPSS 0.22%Aug 18, 2026
- Medium6.5Contributor Cross Site Scripting (XSS) in Frontend Admin by DynamiApps <= 3.29.10 versions.Check if you run itEPSS 0.22%Aug 18, 2026
- Medium6.5Contributor Cross Site Scripting (XSS) in Featured Video Plus <= 2.3.3 versions.Check if you run itEPSS 0.22%Aug 18, 2026
- Medium4.3Subscriber Insecure Direct Object References (IDOR) in Modal Survey <= 2.0.2.2.3 versions.Check if you run itEPSS 0.27%Aug 18, 2026
- High7.1Unauthenticated Cross Site Scripting (XSS) in Fluent Forms Pro Add On Pack < 6.2.12 versions.Check if you run itEPSS 0.25%Aug 18, 2026
- Critical9.9Unrestricted Upload of File with Dangerous Type vulnerability in EDGE22 Studios Ltd.Check if you run itEPSS 0.48%Aug 18, 2026
- High7.5Unauthenticated SQL Injection in Depicter Slider <= 4.8.0 versions.Check if you run itEPSS 0.32%Aug 18, 2026
- High7.2Editor PHP Object Injection in OptionTree <= 2.7.3 versions.Check if you run itEPSS 0.54%Aug 18, 2026
- High8.7Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts() function in xmlparse.c, where processing N specified atCheck if you run itEPSS 0.74%Aug 18, 2026
- High8.8Valkey is a distributed key-value database.Check if you run itEPSS 0.89%Aug 18, 2026
- High8.8Dell Watchdog Timer Driver versions prior to 2.0.0.1 contain an Exposed IOCTL with Insufficient Access Control vulnerability.Check if you run itEPSS 0.15%Aug 18, 2026
- Medium6.5yawkat LZ4 Java provides LZ4 compression for Java.Check if you run itEPSS 0.47%Aug 18, 2026
- Critical9.8Seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities.Check if you run itEPSS 0.81%Aug 18, 2026
- High7.5Valkey is a distributed key-value database.Check if you run itEPSS 0.52%Aug 18, 2026
- Medium5.9goshs is a SimpleHTTPServer written in Go.Check if you run itEPSS 0.26%Aug 18, 2026
- High8.1goshs is a SimpleHTTPServer written in Go.Check if you run itEPSS 0.38%Aug 18, 2026
- High7.1SSH.NET is a Secure Shell (SSH) library for .NET.Check if you run itEPSS 0.42%Aug 18, 2026
Sort