Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Brainstorm Force OttoKit suretriggers allows Blind SQL Injection.…Check if you run itEPSS 0.28%Apr 8, 2026
- Medium4.3Missing Authorization vulnerability in Brainstorm Force CartFlows cartflows allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects…Check if you run itEPSS 0.22%Apr 8, 2026
- Medium5.5Server-Side Request Forgery (SSRF) vulnerability in SeedProd Coming Soon Page, Under Construction & Maintenance Mode by SeedProd coming-soon allows Server Side Request…Check if you run itEPSS 0.19%Apr 8, 2026
- Medium6.9Movable Type provided by Six Apart Ltd.Check if you run itEPSS 0.35%Apr 8, 2026
- Critical9.3Movable Type provided by Six Apart Ltd.Check if you run itEPSS 0.65%Apr 8, 2026
- Medium6.4The Element Pack Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the SVG Image Widget in versions up to and including 8.4.2.Check if you run itEPSS 0.39%Apr 8, 2026
- Medium5.3The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 6.3.7.Check if you run itEPSS 0.33%Apr 8, 2026
- High7.0An exposed IOCTL with an insufficient access control vulnerability has been identified in the utility, MxGeneralIo, for Moxa’s industrial x86 computers.Check if you run itEPSS 0.30%Apr 8, 2026
- Medium4.3The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to authorization bypass through user-controlled key in all versions up to, and i…Check if you run itEPSS 0.54%Apr 8, 2026
- Medium4.4The Inquiry Form to Posts or Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Form Header' field in versions up to and including 1.0.Check if you run itEPSS 0.25%Apr 8, 2026
- Medium5.3The Masteriyo LMS – Online Course Builder for eLearning, LMS & Education plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key in vers…Check if you run itEPSS 0.38%Apr 8, 2026
- Medium5.3Ado::Sessions versions through 0.935 for Perl generates insecure session ids.Check if you run itEPSS 0.43%Apr 8, 2026
- Medium5.3Amon2::Plugin::Web::CSRFDefender versions from 7.00 through 7.03 for Perl generate an insecure session id.Check if you run itEPSS 0.40%Apr 8, 2026
- High8.7SQL Injection vulnerability exists in MATCHA INVOICE 2.6.6 and earlier.Check if you run itEPSS 0.30%Apr 8, 2026
- Medium5.3The MainWP Child Reports plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 2.2.6.Check if you run itEPSS 0.55%Apr 8, 2026
- Medium5.3The LTL Freight Quotes – R+L Carriers Edition plugin for WordPress is vulnerable to Missing Authorization via the plugin's webhook handler in all versions up to, and i…Check if you run itEPSS 0.39%Apr 8, 2026
- Medium4.1An insufficient session expiration vulnerability exists in the latest version of parisneo/lollms.Check if you run itEPSS 0.23%Apr 8, 2026
- High8.2When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case tha…Check if you run itEPSS 0.34%Apr 8, 2026
- Medium5.5tar.Reader can allocate an unbounded amount of memory when reading a maliciously-crafted archive containing a large number of sparse regions encoded in the "old GNU sp…Check if you run itEPSS 0.29%Apr 8, 2026
- High7.5Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly ca…Check if you run itEPSS 0.36%Apr 8, 2026
- High7.5During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermedia…Check if you run itEPSS 0.61%Apr 8, 2026
- High8.8SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass.Check if you run itEPSS 0.66%Apr 8, 2026
- High8.8IBM Langflow Desktop 1.6.0 through 1.8.2 Langflow could allow an authenticated user to execute arbitrary code on the system, caused by an insecure default setting whic…Check if you run itEPSS 0.47%Apr 8, 2026
- High7.8IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.…Check if you run itEPSS 0.23%Apr 8, 2026
- High7.2IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.…Check if you run itEPSS 0.20%Apr 8, 2026
Sort