Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.0Cross-Site request forgery (CSRF) vulnerability in Sitemio Information Technologies Trade Ltd.Check if you run itEPSS 0.17%May 20, 2026
- Medium6.5HCL BigFix Service Management (SM) is affected by a security misconfiguration due to a missing or insecure “X-Content-Type-Options” header.Check if you run itEPSS 0.16%May 20, 2026
- Critical9.8HCL BigFix Service Management (SM) is susceptible to a Configuration – 'Insecure Use of Base Image Version'.Check if you run itEPSS 0.18%May 20, 2026
- Low2.3Insufficient Verification of Data Authenticity in the feedback function of Mesalvo MEONA (MEONA Client and MEONA Server).Check if you run itEPSS 0.09%May 20, 2026
- Medium4.4Use of a Password Hash With Insufficient Computational Effort in Mesalvo MEONA (MEONA Server and MEONA Client) for user accounts whose password was last set under a ve…Check if you run itEPSS 0.10%May 20, 2026
- High7.8Improper Access Control vulnerability in Mesalvo MEONA (MEONA Client and MEONA Server) allows an authenticated MEONA user to access administrative functions of the MEO…Check if you run itEPSS 0.13%May 20, 2026
- High7.5A flaw was found in 389-ds-base.Check if you run itEPSS 0.81%May 20, 2026
- Medium5.3The Slider Revolution plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 7.0.9 via the 'get_stream_data()' function.Check if you run itEPSS 0.33%May 20, 2026
- High8.5attempts to the plugin to the , this root is frequently (the system root) in standard configurations or when using .Check if you run itEPSS 0.22%May 20, 2026
- Medium4.6NLnet Labs Unbound 1.14.0 up to and including version 1.25.0 has a locking inconsistency vulnerability that when certain conditions are met (multi-threaded, RPZ XFR re…Check if you run itEPSS 0.26%May 20, 2026
- Medium6.9NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability when handling replies with very large RRsets that Unbound needs to perform name compression for.Check if you run itEPSS 0.65%May 20, 2026
- Medium5.7NLnet Labs Unbound up to and including version 1.25.0 is vulnerable to poisoning via promiscuous records for the authority section.Check if you run itEPSS 0.26%May 20, 2026
- High8.7NLnet Labs Unbound up to and including version 1.25.0 has a denial of service vulnerability in the DNSSEC validator that can lead to a crash given malicious upstream replies.Check if you run itEPSS 0.81%May 20, 2026
- High8.7NLnet Labs Unbound 1.14.0 up to and including version 1.25.0 has a vulnerability that results in heap overflow when encoding multiple NSID and/or DNS Cookie EDNS and/o…Check if you run itEPSS 0.84%May 20, 2026
- Medium6.9NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability in the DNSSEC validator where the code path to consult the negative cache for DS records does…Check if you run itEPSS 0.34%May 20, 2026
- Medium6.9NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability in the jostle logic that could defeat its purpose and degrade resolution performance.Check if you run itEPSS 0.60%May 20, 2026
- Medium6.6NLnet Labs Unbound up to and including version 1.25.0 is vulnerable to a degradation of service attack related to parsing long lists of incoming EDNS options.Check if you run itEPSS 0.75%May 20, 2026
- High7.8In , the function performs a credential check on the abstract UNIX socket ( ).Check if you run itEPSS 0.18%May 20, 2026
- Medium6.6NLnet Labs Unbound 1.16.2 up to and including version 1.25.0 has a vulnerability of the 'ghost domain names' family of attacks that could extend the ghost domain windo…Check if you run itEPSS 0.14%May 20, 2026
- Medium6.7Dell SmartFabric Storage Software, versions prior to 1.4.5, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability.Check if you run itEPSS 0.45%May 20, 2026
- Critical9.1NLnet Labs Unbound 1.19.1 up to and including version 1.25.0 has a vulnerability in the DNSSEC validator that enables denial of service and possible remote code execut…Check if you run itEPSS 1.42%May 20, 2026
- Medium4.6NLnet Labs Unbound 1.6.2 up to and including version 1.25.0 has a denial of service vulnerability when compiled with DNSCrypt support ('--enable-dnscrypt').Check if you run itEPSS 0.34%May 20, 2026
- Critical9.3SureCart version prior to 4.2.1 are vulnerable to authenticated SQL injection via multiple parameters ('model_name', 'model_id', 'integration_id', 'provider') on the R…Check if you run itEPSS 0.35%May 20, 2026
- Critical9.3NextGEN Gallery version prior to 4.2.1 are vulnerable to authenticated SQL injection via the 'orderby' parameter on the REST API endpoints '/imagely/v1/galleries' and…Check if you run itEPSS 0.29%May 20, 2026
- Medium4.3The Anomify AI – Anomaly Detection and Alerting plugin for WordPress is vulnerable to Cross-Site Request Forgery (CSRF) leading to Stored Cross-Site Scripting (XSS) in…Check if you run itEPSS 0.17%May 20, 2026
Sort