Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.3Squidex is an open source headless content management system and content management hub.Check if you run itEPSS 0.36%Apr 22, 2026
- High7.3Kiota is an OpenAPI based HTTP Client code generator.Check if you run itEPSS 0.35%Apr 22, 2026
- Medium4.6An authenticated attacker can persist crafted values in multiple field types and trigger client-side script execution when another user opens the affected document in Desk.Check if you run itEPSS 0.34%Apr 22, 2026
- Medium5.1ICEWARP 10.3.4 and 11.0.0.0 contains a cross-site scripting vulnerability that allows attackers to inject malicious HTML elements into emails by embedding base64-encod…Check if you run itEPSS 0.23%Apr 22, 2026
- Medium6.5A client might theoretically be able to cause a mismatch between queries sent to a backend and the received responses by sending a flood of perfectly timed queries tha…Check if you run itEPSS 0.39%Apr 22, 2026
- High7.5A client can trigger excessive memory allocation by generating a lot of errors responses over a single DoQ and DoH3 connection, as some resources were not properly rel…Check if you run itEPSS 0.80%Apr 22, 2026
- High7.5A client can trigger excessive memory allocation by generating a lot of queries that are routed to an overloaded DoH backend, causing queries to accumulate into a buff…Check if you run itEPSS 0.80%Apr 22, 2026
- High7.5A client can trigger a divide by zero error leading to crash by sending a crafted DNSCrypt query.Check if you run itEPSS 0.82%Apr 22, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: prevent immediate PASID reuse case PASID resue could cause interrupt issue when process…Check if you run itEPSS 0.12%Apr 22, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free and NULL deref in smb_grant_oplock() smb_grant_oplock() has two issues in…Check if you run itEPSS 0.65%Apr 22, 2026
- Medium4.3The Fast & Fancy Filter – 3F plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to and including 1.2.2.Check if you run itEPSS 0.20%Apr 22, 2026
- Medium6.4The Bread & Butter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'breadbutter-customevent-button' shortcode in all versions up to, and incl…Check if you run itEPSS 0.33%Apr 22, 2026
- Medium4.3The Ni WooCommerce Order Export plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 3.1.6.Check if you run itEPSS 0.19%Apr 22, 2026
- Medium4.3The mCatFilter plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 0.5.2.Check if you run itEPSS 0.20%Apr 22, 2026
- Medium4.3The DX Unanswered Comments plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7.Check if you run itEPSS 0.23%Apr 22, 2026
- Medium4.3The TextP2P Texting Widget plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 1.7.Check if you run itEPSS 0.19%Apr 22, 2026
- Medium6.1The WP Responsive Popup + Optin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 1.4.Check if you run itEPSS 0.22%Apr 22, 2026
- Medium4.3The Kcaptcha plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 1.0.1.Check if you run itEPSS 0.20%Apr 22, 2026
- Medium4.3The Call To Action Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.3.Check if you run itEPSS 0.23%Apr 22, 2026
- Medium6.1The Inquiry Cart plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.4.2.Check if you run itEPSS 0.24%Apr 22, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix potencial OOB in get_file_all_info() for compound requests When a compound request consi…Check if you run itEPSS 0.72%Apr 22, 2026
- Critical9.8In Progress® Telerik® UI for AJAX versions 2024.4.1114 through 2026.1.421, the RadFilter control is vulnerable to insecure deserialization when restoring filter state…Check if you run itEPSS 0.73%Apr 22, 2026
- High7.3Missing critical step in authentication in Apache HttpClient 5.6 allows an attacker to cause the client to accept SCRAM-SHA-256 authentication without proper mutual au…Check if you run itEPSS 0.70%Apr 22, 2026
- High8.8MinIO is a high-performance object storage system.Check if you run itEPSS 0.60%Apr 22, 2026
- High8.8MinIO is a high-performance object storage system.Check if you run itEPSS 0.71%Apr 22, 2026