Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1cusrev customer_reviews_for_woocommerce Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.29%Apr 16, 2026
- Medium5.4Inadequate Encryption Strength vulnerability in TP-Link Archer C7 v5 and v5.8 (uhttpd modules) allows Password Recovery Exploitation.Check if you run itEPSS 0.11%Apr 16, 2026
- Medium5.3Prometheus is an open-source monitoring system and time series database.Check if you run itEPSS 0.26%Apr 15, 2026
- High8.8Composer is a dependency manager for PHP.Check if you run itEPSS 1.91%Apr 15, 2026
- High7.8Composer is a dependency manager for PHP.Check if you run itEPSS 1.00%Apr 15, 2026
- Medium5.5A vulnerability in the CLI of Cisco ThousandEyes Enterprise Agent could allow an authenticated, local attacker with low privileges to overwrite arbitrary files on the…Check if you run itEPSS 0.13%Apr 15, 2026
- Medium6.0A vulnerability in the CLI of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, local attacker with…Check if you run itEPSS 0.50%Apr 15, 2026
- Medium4.8Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker with administrativ…Check if you run itEPSS 0.17%Apr 15, 2026
- Medium4.7A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to redirect a user to a malicious web page.Check if you run itEPSS 0.20%Apr 15, 2026
- Medium6.1A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a reflected XSS attack again…Check if you run itEPSS 0.19%Apr 15, 2026
- Medium6.1The Product Pricing Table by WooBeWoo plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.0.Check if you run itEPSS 0.13%Apr 15, 2026
- Critical9.0@fastify/reply-from v12.6.1 and earlier and @fastify/http-proxy v11.4.3 and earlier process the client's Connection header after the proxy has added its own headers vi…Check if you run itEPSS 0.56%Apr 15, 2026
- High8.8The Login as User plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.0.3.Check if you run itEPSS 0.52%Apr 15, 2026
- Medium6.1The OPEN-BRAIN plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.5.0.Check if you run itEPSS 0.21%Apr 15, 2026
- Medium4.3The Petje.af plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 2.1.8.Check if you run itEPSS 0.20%Apr 15, 2026
- Medium6.4The WP Circliful plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' shortcode attribute of the [circliful] shortcode and via multiple short…Check if you run itEPSS 0.41%Apr 15, 2026
- UnknownMissing Authentication for Critical FunctionPatch nowKEVEPSS 1.30%Apr 15, 2026
- Medium6.5Jellyfin is an open source self hosted media server.Check if you run itEPSS 0.45%Apr 14, 2026
- High7.1libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel.Check if you run itEPSS 0.21%Apr 14, 2026
- Medium4.8October is a Content Management System (CMS) and web platform.Check if you run itEPSS 0.22%Apr 14, 2026
- High8.8Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.82%Apr 14, 2026
- High7.8Heap-based buffer overflow in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.33%Apr 14, 2026
- Medium5.5A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientEMS 7.4.0 through 7.4.5 may allow attacker to information disclosure via decrypting database dump.Check if you run itEPSS 0.15%Apr 14, 2026
- Medium6.7A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.0 through 7.4.5, FortiClientEMS 7.2…Check if you run itEPSS 0.20%Apr 14, 2026
- Low2.7A insufficiently protected credentials vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4 all versions, FortiSandbox PaaS 5.0.1 through 5.0.5…Check if you run itEPSS 0.30%Apr 14, 2026