Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.3Improper privilege management in Samsung System Support Service prior to version 8.0.8.0 allows local attackers to trigger privileged functions.Check if you run itEPSS 0.09%May 13, 2026
- Medium6.9Improper handling of insufficient permissions in Routines prior to SMR May-2026 Release 1 allows local attackers to access sensitive information.Check if you run itEPSS 0.09%May 13, 2026
- Medium5.1Improper input validation in Routines prior to SMR May-2026 Release 1 allows physical attackers to launch privileged activity.Check if you run itEPSS 0.21%May 13, 2026
- Medium5.1Improper export of android application components in OmaCP prior to SMR May-2026 Release 1 allows local attackers to trigger privileged functions.Check if you run itEPSS 0.09%May 13, 2026
- High8.6Improper input validation in FacAtFunction in Galaxy Watch prior to SMR May-2026 Release 1 allows local attacker to execute arbitrary code with system privilege.Check if you run itEPSS 0.16%May 13, 2026
- Medium6.8Out-of-bounds write in SveService prior to SMR May-2026 Release 1 allows local privileged attackers to execute arbitrary code.Check if you run itEPSS 0.15%May 13, 2026
- Medium5.1Incorrect privilege assignment in LocationManager prior to SMR May-2026 Release 1 allows local attackers to access sensitive information.Check if you run itEPSS 0.09%May 13, 2026
- Medium6.8Incorrect default permissions in FactoryCamera prior to SMR May-2026 Release 1 allows local attacker to access unique identifier.Check if you run itEPSS 0.09%May 13, 2026
- Medium5.3The ilGhera Support System for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'get_ticket_conte…Check if you run itEPSS 0.26%May 13, 2026
- High7.2Hitachi Vantara Pentaho Data Integration & Analytics of all versions contain a JDBC driver for H2 databases which is vulnerable to external script execution when a new…Check if you run itEPSS 0.34%May 13, 2026
- High8.1The coreActivity: Activity Logging for WordPress plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.0.Check if you run itEPSS 0.48%May 13, 2026
- Medium6.5The Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More plugin for WordPress is vulnerable to generic SQL Injection via the 's' pa…Check if you run itEPSS 0.28%May 13, 2026
- Medium5.4The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 8.9.0.Check if you run itEPSS 0.41%May 13, 2026
- Medium6.4The Cost of Goods: Product Cost & Profit Calculator for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'alg_wc_cog_prod…Check if you run itEPSS 0.19%May 13, 2026
- Medium6.4The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'p…Check if you run itEPSS 0.20%May 13, 2026
- Medium4.4The Broadstreet plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.53.1 due to insufficient i…Check if you run itEPSS 0.19%May 13, 2026
- Medium4.3The Broadstreet plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the create_advertiser AJAX action in all versions up to,…Check if you run itEPSS 0.16%May 13, 2026
- Medium5.3The Broadstreet plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.53.1 via the get_sponsored_meta() AJAX action.Check if you run itEPSS 0.27%May 13, 2026
- Medium5.3The Cost Calculator Builder plugin for WordPress is vulnerable to Unauthenticated Price Manipulation and Insecure Direct Object Reference (IDOR) in all versions up to,…Check if you run itEPSS 0.23%May 13, 2026
- High7.7After invoking $_internalJsEmit, which is not intended to be directly accessible, or mapreduce command’s map function in a certain way, an authenticated user can subse…Check if you run itEPSS 0.26%May 13, 2026
- Medium5.3Using a densely populated chars mask and a large input string in the MongoDB aggregation operators $trim, $ltrim, and $rtrim, an authenticated user with aggregation pe…Check if you run itEPSS 0.26%May 13, 2026
- Medium6.1A use-after-free vulnerability exists in MongoDB's Field-Level Encryption (FLE) query analysis component, affecting client-side uses of mongocryptd and crypt_shared.Check if you run itEPSS 0.13%May 13, 2026
- Medium4.8When schema validation is enabled on a collection and an update or insert would violate the collection's schema, the local server log message generated may not have al…Check if you run itEPSS 0.20%May 13, 2026
- High7.1An authenticated user can cause excess memory usage via bitwise match expression AST processing of $bitsAllSet, $bitsAnySet, $bitsAllClear, and $bitsAnyClear.Check if you run itEPSS 0.26%May 13, 2026
- High8.7An issue in MongoDB Server's time-series collection implementation allows an authenticated user with database write privileges to trigger an out-of-bounds memory write…Check if you run itEPSS 0.66%May 13, 2026
Sort