Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.0.6.Check if you run itEPSS 0.40%May 19, 2026
- High7.5The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation…Check if you run itEPSS 0.56%May 19, 2026
- High8.2LIVE555 before 2026.04.22 contains an authorization bypass vulnerability in RTSP session command handling that allows attackers to replay valid Session tokens from una…Check if you run itEPSS 0.48%May 19, 2026
- Low2.1Discourse is an open-source discussion platform.Check if you run itEPSS 0.21%May 19, 2026
- Medium6.8EspoCRM is an open source customer relationship management application.Check if you run itEPSS 0.21%May 19, 2026
- Critical9.8Kitty is a cross-platform GPU based terminal.Check if you run itEPSS 0.29%May 19, 2026
- Medium6.5Faraday is an HTTP client library abstraction layer that provides a common interface over many adapters.Check if you run itEPSS 0.27%May 19, 2026
- Medium6.5libheif is a HEIF and AVIF file format decoder and encoder.Check if you run itEPSS 0.30%May 19, 2026
- Medium5.1In ScadaBR version 1.2.0, a Use of Hard-Coded Credentials vulnerability could allow an attacker to access the SCADA system as admin.Check if you run itEPSS 0.39%May 19, 2026
- High8.6In ScadaBR version 1.2.0, a CSRF vulnerability could allow an attacker to trigger any authenticated action through a victim's session by luring any logged-in user to a…Check if you run itEPSS 0.18%May 19, 2026
- High8.7In ScadaBR version 1.2.0, an OS Command Injection vulnerability could allow an attacker to execute commands as root on the SCADA system.Check if you run itEPSS 1.32%May 19, 2026
- High8.8In ScadaBR version 1.2.0, a Missing Authentication for Critical Function vulnerability could allow an unauthenticated attacker to send a HTTP GET requests to the SCADA…Check if you run itEPSS 0.45%May 19, 2026
- High8.7Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution (RCE), potentially allowing code execution on the affected systemCheck if you run itEPSS 0.52%May 19, 2026
- High8.6Windmill prior to 1.703.2 contains an incorrect default permissions vulnerability in nsjail sandbox configuration files where /etc is bind-mounted without read-write r…Check if you run itEPSS 0.28%May 19, 2026
- High8.8Kitty is a cross-platform GPU based terminal.Check if you run itEPSS 0.38%May 19, 2026
- Medium5.9NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform.Check if you run itEPSS 0.40%May 19, 2026
- Medium4.6In the web management interface of Archer AX72 (SG) v1, the network diagnostic feature improperly handles invalid user input, resulting in limited exposure of diagnost…Check if you run itEPSS 0.22%May 19, 2026
- Critical9.2Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via external URL resolution in uploaded IaC templates when running in server mode.Check if you run itEPSS 0.48%May 19, 2026
- Critical9.2Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via the remote_url parameter in the remote directory scan endpoint (POST /v1/{iac}/{ia…Check if you run itEPSS 0.48%May 19, 2026
- High8.7Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via the webhook_url parameter in the file scan endpoint (POST /v1/{iac}/{iacVersion}/{…Check if you run itEPSS 0.50%May 19, 2026
- Critical9.8An authentication bypass vulnerability exists in the embedded HTTP server of Panabit PAP-XM320 up to and including v7.7.Check if you run itEPSS 1.27%May 19, 2026
- High8.8A command injection vulnerability exists in the /cgi-bin/tools/ajax_cmd endpoint of Panabit PAP-XM320 up to and including v7.7.Check if you run itEPSS 1.67%May 19, 2026
- Medium5.4A command injection vulnerability exists in Panabit PAP-XM320 up to and including V7.7.Check if you run itEPSS 0.74%May 19, 2026
- Medium6.5Firefox for iOS hosted Reader mode on an unauthenticated local web server, allowing another application on the same device to request arbitrary URLs and receive the re…Check if you run itEPSS 0.19%May 19, 2026
- High8.4An improper authentication vulnerability was discovered in the Motorola Factory Test component (com.motorola.motocit).Check if you run itEPSS 0.31%May 19, 2026
Sort