Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.0An exposed IOCTL with an insufficient access control vulnerability has been identified in the utility, MxGeneralIo, for Moxa’s industrial x86 computers.Check if you run itEPSS 0.39%Apr 8, 2026
- Medium4.3The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to authorization bypass through user-controlled key in all versions up to, and i…Check if you run itEPSS 0.49%Apr 8, 2026
- Medium5.3The PZ Frontend Manager plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 1.0.6.Check if you run itEPSS 0.42%Apr 8, 2026
- Medium6.4On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target of the symlink, even when th…Check if you run itEPSS 0.29%Apr 8, 2026
- High7.1The compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from making the correct determina…Check if you run itEPSS 0.26%Apr 8, 2026
- Low2.7GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an…Check if you run itEPSS 0.44%Apr 8, 2026
- Critical9.8Issue summary: Converting an excessively large OCTET STRING value to a hexadecimal string leads to a heap buffer overflow on 32 bit platforms.Check if you run itEPSS 0.24%Apr 7, 2026
- High7.5Issue summary: During processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo a NULL pointer dereference can happen.Check if you run itEPSS 0.80%Apr 7, 2026
- High7.5Issue summary: During processing of a crafted CMS EnvelopedData message with KeyAgreeRecipientInfo a NULL pointer dereference can happen.Check if you run itEPSS 0.80%Apr 7, 2026
- Medium5.3Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.32%Apr 7, 2026
- High8.5There is a memory corruption vulnerability due to an out-of-bounds read in sentry_transaction_context_set_operation() in NI LabVIEW.Check if you run itEPSS 0.19%Apr 7, 2026
- Medium6.2OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.Check if you run itEPSS 0.18%Apr 7, 2026
- Medium6.2OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.Check if you run itEPSS 0.16%Apr 7, 2026
- High7.5Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library.Check if you run itEPSS 0.46%Apr 7, 2026
- Medium5.5Sensitive Information Leak in cqlsh in Apache Cassandra 4.0 allows access to sensitive information, like passwords, from previously executed cqlsh command via ~/.cassa…Check if you run itEPSS 0.19%Apr 7, 2026
- High8.7Windmill versions 1.56.0 through 1.614.0 contain a missing authorization vulnerability that allows users with the Operator role to perform prohibited entity creation a…Check if you run itEPSS 2.61%Apr 7, 2026
- High7.5Strawberry GraphQL is a library for creating GraphQL APIs.Check if you run itEPSS 0.48%Apr 7, 2026
- Medium6.2go-ipld-prime is an implementation of the InterPlanetary Linked Data (IPLD) spec interfaces, a batteries-included codec implementations of IPLD for CBOR and JSON, and…Check if you run itEPSS 0.16%Apr 7, 2026
- Medium5.1MLflow is vulnerable to Stored Cross-Site Scripting (XSS) caused by unsafe parsing of YAML-based MLmodel artifacts in its web interface.Check if you run itEPSS 0.30%Apr 7, 2026
- Medium5.5Buffer Overflow Vulnerability in JP1/IT Desktop Management 2 - Manager on Windows, JP1/IT Desktop Management 2 - Operations Director on Windows, Job Management Partner…Check if you run itEPSS 0.14%Apr 7, 2026
- Critical9.8Remote Code Execution Vulnerability in JP1/IT Desktop Management 2 - Manager on Windows, JP1/IT Desktop Management 2 - Operations Director on Windows, Job Management P…Check if you run itEPSS 0.61%Apr 7, 2026
- High8.8Apache ActiveMQ Improper Input Validation VulnerabilityPatch nowKEVEPSS 15.49%Apr 7, 2026
- Medium5.3WWBN AVideo is an open source video platform.Check if you run itEPSS 0.39%Apr 6, 2026
- Medium6.1SymCrypt is the core cryptographic function library currently used by Windows.Check if you run itEPSS 0.35%Apr 6, 2026
- High8.1Ferret is a declarative system for working with web data.Check if you run itEPSS 0.71%Apr 6, 2026