Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7A remote code execution vulnerability exists in Code Runner MCP Server when run with the --transport http option, which exposes the /mcp JSON-RPC endpoint without auth…Check if you run itEPSS 0.29%May 12, 2026
- High7.3A vulnerability has been identified in Solid Edge SE2026 (All versions < V226.0 Update 5).Check if you run itEPSS 0.11%May 12, 2026
- High7.3A vulnerability has been identified in Solid Edge SE2026 (All versions < V226.0 Update 5).Check if you run itEPSS 0.10%May 12, 2026
- Critical9.3A vulnerability has been identified in ROS# (All versions < V2.2.2).Check if you run itEPSS 0.49%May 12, 2026
- Medium5.9A vulnerability has been identified in blueplanet 100 NX3 M8 (All versions), blueplanet 100 TL3 GEN2 (All versions), blueplanet 105 TL3 (All versions < V3.92), bluepla…Check if you run itEPSS 0.15%May 12, 2026
- High8.7A vulnerability has been identified in Teamcenter V2312 (All versions < V2312.0014), Teamcenter V2406 (All versions < V2406.0012), Teamcenter V2412 (All versions < V24…Check if you run itEPSS 0.29%May 12, 2026
- High8.5A vulnerability has been identified in Teamcenter V2312 (All versions < V2312.0014), Teamcenter V2406 (All versions < V2406.0012), Teamcenter V2412 (All versions < V24…Check if you run itEPSS 0.19%May 12, 2026
- High7.0Affected devices do not properly restrict access to the web browser via the Control Panel when no corresponding security mechanisms are in place.Check if you run itEPSS 0.11%May 12, 2026
- High7.2Affected devices do not properly validate and sanitize filenames on the Firmware Update page.Check if you run itEPSS 0.27%May 12, 2026
- Critical9.3Affected devices do not properly validate and sanitize Technology Object (TO) name rendered on the "Motion Control Diagnostics" page of the web interface.Check if you run itEPSS 0.37%May 12, 2026
- Critical9.3Affected devices do not properly validate and sanitize PLC/station name rendered on the "communication" parameters page of the web interface.Check if you run itEPSS 0.37%May 12, 2026
- High8.7A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0).Check if you run itEPSS 0.32%May 12, 2026
- High8.8A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0).Check if you run itEPSS 0.30%May 12, 2026
- Medium4.3The Motors – Car Dealership & Classified Listings plugin for WordPress is vulnerable to Payment Bypass via insecure user meta update in all versions up to, and includi…Check if you run itEPSS 0.22%May 12, 2026
- Critical9.8Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Akilli Commerce Software Technologies Ltd.Check if you run itEPSS 0.26%May 12, 2026
- High8.9A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versio…Check if you run itEPSS 0.67%May 12, 2026
- Medium6.1A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versio…Check if you run itEPSS 0.40%May 12, 2026
- High7.7A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versio…Check if you run itEPSS 0.54%May 12, 2026
- High7.2A vulnerability has been identified in blueplanet 100 NX3 M8 (All versions), blueplanet 100 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 105 TL3 (All versions < V3.9…Check if you run itEPSS 0.19%May 12, 2026
- High8.7The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests.Check if you run itEPSS 0.32%May 12, 2026
- Medium6.9A vulnerability has been identified in SIPROTEC 5 6MD84 (CP300) (All versions = V7.80 = V7.80 = V7.80 = V7.80 = V7.80 = V7.80), SIPROTEC 5 7SA82 (CP150) (All versions…Check if you run itEPSS 0.31%May 12, 2026
- Medium6.4The Bootstrap Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the shortcode in all versions up to, and including, 1.0.Check if you run itEPSS 0.19%May 12, 2026
- Medium6.4The Advanced Social Media Icons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the shortcode in all versions up to, and including, 1.2.Check if you run itEPSS 0.24%May 12, 2026
- Medium5.3The Slek Gateway for WooCommerce plugin for WordPress is vulnerable to Information Exposure in version 1.0.Check if you run itEPSS 0.25%May 12, 2026
- Medium4.3The Zawgyi Embed plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.1.Check if you run itEPSS 0.13%May 12, 2026
Sort