Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1Queue Management System 4.0.0 contains a stored cross-site scripting vulnerability that allows authenticated administrators to inject malicious scripts through user cr…Check if you run itEPSS 0.24%May 16, 2026
- Critical9.3libbabl 0.1.62 contains a broken double free detection vulnerability that allows attackers to bypass memory safety checks by exploiting signature overwriting in freed chunks.Check if you run itEPSS 0.46%May 16, 2026
- Medium5.1CMS Made Simple 2.2.15 contains a stored cross-site scripting vulnerability that allows authenticated users with Content Manager access to inject malicious scripts thr…Check if you run itEPSS 0.24%May 16, 2026
- Medium5.1Composr CMS 10.0.34 contains a persistent cross-site scripting vulnerability that allows authenticated administrators to inject malicious scripts through the banner ma…Check if you run itEPSS 0.24%May 16, 2026
- Medium5.1NewsLister contains an authenticated persistent cross-site scripting vulnerability that allows authenticated administrators to inject malicious scripts through the tit…Check if you run itEPSS 0.24%May 16, 2026
- Medium5.1WordPress Theme Wibar 1.1.8 contains a stored cross-site scripting vulnerability in the Brand component that allows authenticated users to inject malicious scripts by…Check if you run itEPSS 0.24%May 16, 2026
- Medium6.9Internet Download Manager 6.38.12 contains a buffer overflow vulnerability in the Scheduler component that allows local attackers to crash the application by supplying…Check if you run itEPSS 0.15%May 16, 2026
- Medium5.1WordPress Plugin Buddypress 6.2.0 contains a persistent cross-site scripting vulnerability that allows authenticated attackers with moderator privileges to inject mali…Check if you run itEPSS 0.28%May 16, 2026
- High8.5Advanced System Care Service 13.0.0.157 contains an unquoted service path vulnerability in the AdvancedSystemCareService13 service binary path that allows local attack…Check if you run itEPSS 0.12%May 16, 2026
- High8.5Privacy Drive 3.17.0 contains an unquoted service path vulnerability in the pdsvc.exe service binary that allows local attackers to escalate privileges by exploiting t…Check if you run itEPSS 0.12%May 16, 2026
- High8.5Syncplify.me Server! 5.0.37 contains an unquoted service path vulnerability in the SMWebRestServicev5 service that allows local attackers to escalate privileges by exp…Check if you run itEPSS 0.11%May 16, 2026
- High8.5OKI sPSV Port Manager 1.0.41 contains an unquoted service path vulnerability in the sPSVOpLclSrv service that allows local attackers to escalate privileges by insertin…Check if you run itEPSS 0.11%May 16, 2026
- Critical9.3iDS6 DSSPro Digital Signage System 6.2 contains a CAPTCHA security bypass vulnerability that allows attackers to bypass authentication by requesting the autoLoginVerifyCode object.Check if you run itEPSS 0.43%May 16, 2026
- High8.7HS Brand Logo Slider 2.1 contains an unrestricted file upload vulnerability that allows authenticated users to bypass client-side file extension validation by uploadin…Check if you run itEPSS 0.54%May 16, 2026
- Medium6.5Net::Statsd::Lite versions before 0.9.0 for Perl allowed metric injections.Check if you run itEPSS 0.31%May 16, 2026
- Medium4.3The Multicollab: Content Team Collaboration and Editorial Workflow plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability…Check if you run itEPSS 0.24%May 16, 2026
- High7.8Versions of the package jsondiffpatch before 0.7.6 are vulnerable to Prototype Pollution via the jsondiffpatch.patch() and jsondiffpatch/formatters/jsonpatch.patch() APIs.Check if you run itEPSS 0.38%May 16, 2026
- Low2.0Versions of the package jsondiffpatch before 0.7.6 are vulnerable to Cross-site Scripting (XSS) via the annotated formatter due to improper sanitization of JSON values…Check if you run itEPSS 0.19%May 16, 2026
- Medium5.3The Essential Chat Support plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.0.1.Check if you run itEPSS 0.32%May 16, 2026
- Medium6.5Crypt::DSA versions through 1.19 for Perl use 2-args open, allowing existing files to be modified.Check if you run itEPSS 0.32%May 15, 2026
- High7.3Crypt::DSA versions before 1.20 for Perl generate seeds using rand.Check if you run itEPSS 0.36%May 15, 2026
- Medium6.5Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Check if you run itEPSS 0.34%May 15, 2026
- Medium6.5Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Check if you run itEPSS 0.28%May 15, 2026
- High8.1Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Check if you run itEPSS 0.34%May 15, 2026
- Medium5.4Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Check if you run itEPSS 0.19%May 15, 2026
Sort