Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.1A vulnerability was determined in AutohomeCorp frostmourne up to 1.0.Check if you run itEPSS 0.21%Apr 1, 2026
- High7.1PowerStore, contains a Path Traversal vulnerability in the Service user.Check if you run itEPSS 0.12%Apr 1, 2026
- High7.2Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application version(s) 5.28.00.xx to 5.32.00.xx, contain(s) an Improper Limitation of a Pathname to a Restricted Di…Check if you run itEPSS 0.40%Apr 1, 2026
- Medium5.5A vulnerability was found in Sanster IOPaint 1.5.3.Check if you run itEPSS 0.64%Apr 1, 2026
- High7.5A regression in the way hashes were calculated caused rules containing the address range syntax (x.x.x.x - y.y.y.y) that only differ in the address range(s) involved t…Check if you run itEPSS 0.25%Apr 1, 2026
- Medium5.3The Export All URLs WordPress plugin before 5.1 generates CSV filenames containing posts URLS (including private posts) in a predictable pattern using a random 6-digit number.Check if you run itEPSS 0.31%Apr 1, 2026
- Medium6.5Inappropriate implementation in WebGL in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to obtain potentially sensitive information from process memor…Check if you run itEPSS 0.25%Apr 1, 2026
- Medium6.5Insufficient policy enforcement in WebUSB in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to obtain potentially sensitive information from process m…Check if you run itEPSS 0.25%Apr 1, 2026
- Low2.0A weakness has been identified in bufanyun HotGo 1.0/2.0.Check if you run itEPSS 0.25%Apr 1, 2026
- Low2.1A vulnerability was identified in z-9527 admin 1.0/2.0.Check if you run itEPSS 0.25%Apr 1, 2026
- High7.1Addressed a potential insecure direct object reference (IDOR) vulnerability in the signing invitation acceptance process.Check if you run itEPSS 0.18%Apr 1, 2026
- Medium4.3The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the en…Check if you run itEPSS 0.24%Apr 1, 2026
- Medium5.5The application does not detect or guard against cyclic PDF object references while handling JavaScript in PDF.Check if you run itEPSS 0.11%Apr 1, 2026
- Medium5.5The application does not validate the presence of required appearance (AP) data before accessing stamp annotation resources.Check if you run itEPSS 0.11%Apr 1, 2026
- High7.8The application's update service, when checking for updates, loads certain system libraries from a search path that includes directories writable by low‑privileged use…Check if you run itEPSS 0.26%Apr 1, 2026
- High7.5The application allows PDF JavaScript and document/print actions (such as WillPrint/DidPrint) to update form fields, annotations, or optional content groups (OCGs) imm…Check if you run itEPSS 0.11%Apr 1, 2026
- High8.7XenForo before 2.3.7 discloses filesystem paths through exception messages triggered by open_basedir restrictions.Check if you run itEPSS 0.35%Apr 1, 2026
- Critical9.3XenForo before 2.3.7 contains a security issue affecting Passkeys that have been added to user accounts.Check if you run itEPSS 0.46%Apr 1, 2026
- High8.7XenForo before 2.3.5 allows OAuth2 client applications to request unauthorized scopes.Check if you run itEPSS 0.27%Apr 1, 2026
- Medium5.3XenForo before 2.2.17 and 2.3.1 allows open redirect via a specially crafted URL.Check if you run itEPSS 0.15%Apr 1, 2026
- Medium5.5A weakness has been identified in itsourcecode Payroll Management System 1.0.Check if you run itEPSS 0.26%Apr 1, 2026
- Low1.9A vulnerability was identified in Axiomatic Bento4 up to 1.6.0-641.Check if you run itEPSS 0.16%Mar 31, 2026
- Medium5.5iccDEV provides a set of libraries and tools for working with ICC color management profiles.Check if you run itEPSS 0.16%Mar 31, 2026
- Medium6.2iccDEV provides a set of libraries and tools for working with ICC color management profiles.Check if you run itEPSS 0.18%Mar 31, 2026
- Low2.1A vulnerability was identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DN…Check if you run itEPSS 0.88%Mar 31, 2026
Sort