Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to payment bypass through user-controlled key in all versio…Check if you run itEPSS 0.42%May 14, 2026
- Medium4.3The My Calendar – Accessible Event Manager plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.7.9.Check if you run itEPSS 0.34%May 14, 2026
- Medium6.4The Envira Gallery Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the REST API in versions up to and including 1.12.4.Check if you run itEPSS 0.35%May 14, 2026
- Medium6.5The Unlimited Elements for Elementor plugin for WordPress is vulnerable to SQL Injection via the 'data[filter_search]' parameter in the get_cat_addons AJAX action in v…Check if you run itEPSS 0.49%May 14, 2026
- High7.1SOGo before 5.12.7, when PostgreSQL or MariaDB is used, and cleartext passwords are stored, allows SQL injection.Check if you run itEPSS 0.24%May 14, 2026
- High7.1SOGo before 5.12.7, when PostgreSQL is used, allows SQL injection.Check if you run itEPSS 0.24%May 14, 2026
- High7.5Yubico webauthn-server-core (aka java-webauthn-server) 2.8.0 before 2.8.2 incorrectly checks a function's return value in the second factor flow, leading to impersonation.Check if you run itEPSS 0.31%May 14, 2026
- Medium6.5In OpenStack Ironic through 35.x before a3f6d73, during image handling, an infinite loop in checksum calculations can occur via the file:///dev/zero URL.Check if you run itEPSS 0.47%May 14, 2026
- Medium6.3Android App "あんしんフィルター for au" provided by KDDI CORPORATION contains Cleartext Transmission of Sensitive Information (CWE-319) vulnerability.Check if you run itEPSS 0.09%May 14, 2026
- Critical9.8The Burst Statistics – Privacy-Friendly WordPress Analytics (Google Analytics Alternative) plugin for WordPress is vulnerable to Authentication Bypass in versions 3.4.0 to 3.4.1.1.Patch nowKEVEPSS 14.61%May 14, 2026
- High8.7FunnelKit funnel_builder Missing AuthorizationPatch nowKEVEPSS 0.46%May 14, 2026
- Medium6.1Microsoft Exchange Server Cross-Site Scripting VulnerabilityPatch nowKEVEPSS 70.66%May 14, 2026
- Critical10.0Cisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityPatch nowKEVEPSS 91.82%May 14, 2026
- Critical9.8Web::Passwd versions through 0.03 for Perl is vulnerable to RCE.Check if you run itEPSS 1.65%May 13, 2026
- High7.1Improper authorization checks of team members privileges allow a team member to escalate privileges to the team owner account.Check if you run itEPSS 0.23%May 13, 2026
- High8.1Insufficient sanitization of SQL queries in the utility script allows SQL Injections on behalf of the root user if Slow Query logging is enabled.Check if you run itEPSS 0.31%May 13, 2026
- Critical9.1OPNsense is a FreeBSD based firewall and routing platform.Check if you run itEPSS 0.53%May 13, 2026
- High7.5hoppscotch is an open source API development ecosystem.Check if you run itEPSS 0.24%May 13, 2026
- High7.8gitoxide is an implementation of git written in Rust.Check if you run itEPSS 0.29%May 13, 2026
- Medium6.5ERPNext is a free and open source Enterprise Resource Planning tool.Check if you run itEPSS 0.14%May 13, 2026
- High7.5ERPNext is a free and open source Enterprise Resource Planning tool.Check if you run itEPSS 0.31%May 13, 2026
- High7.5ERPNext is a free and open source Enterprise Resource Planning tool.Check if you run itEPSS 0.27%May 13, 2026
- Medium5.3ERPNext is a free and open source Enterprise Resource Planning tool.Check if you run itEPSS 0.22%May 13, 2026
- Critical9.9ERPNext is a free and open source Enterprise Resource Planning tool.Check if you run itEPSS 0.28%May 13, 2026
- Medium4.3ERPNext is a free and open source Enterprise Resource Planning tool.Check if you run itEPSS 0.16%May 13, 2026
Sort