Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.9An issue was discovered in the PaperCut Hive Ricoh embedded application.Check if you run itEPSS 0.41%May 5, 2026
- Medium4.6An issue was discovered in the Shared Account Synchronization component of PaperCut MF (version 25.0.4).Check if you run itEPSS 0.56%May 5, 2026
- Medium6.4The Royal Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Instagram Feed widget's 'instagram_follow_text' setting in all…Check if you run itEPSS 0.36%May 5, 2026
- Medium6.1The Publish 2 Ping.fm plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.Check if you run itEPSS 0.18%May 5, 2026
- Medium4.3The addfreespace plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.1.3.Check if you run itEPSS 0.24%May 5, 2026
- Medium4.3The DX Sources plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.1.Check if you run itEPSS 0.19%May 5, 2026
- Medium6.1The Zingaya Click-to-Call plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'email', 'first_name', 'last_name', and 'phone' parameters on th…Check if you run itEPSS 0.38%May 5, 2026
- Medium5.5The Schedule Post Changes With PublishPress Future plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wrapper' attribute of the [futureaction]…Check if you run itEPSS 0.36%May 5, 2026
- Medium4.9The Loco Translate plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 2.8.2 via the AJAX route.Check if you run itEPSS 0.64%May 5, 2026
- Critical9.8The Mentoring plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.2.8.Check if you run itEPSS 0.34%May 5, 2026
- Critical9.8The MoreConvert Pro plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.9.14.Check if you run itEPSS 0.83%May 5, 2026
- Low2.1A flaw has been found in CodeCanyon Perfex CRM up to 3.4.1.Check if you run itEPSS 0.32%May 5, 2026
- Unknownscriptsbundle adforest Weak Password Recovery Mechanism for Forgotten PasswordPatch nowKEVEPSS 0.72%May 5, 2026
- Unknownscriptsbundle adforest Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 1.22%May 5, 2026
- High8.5Improper privilege management in the log rotation mechanism of the Skylight Workspace Config Service in Amazon WorkSpaces for Windows before 2.6.2034.0 allows a local…Check if you run itEPSS 0.13%May 4, 2026
- Critical9.8Nginx UI is a web user interface for the Nginx web server.Check if you run itEPSS 1.60%May 4, 2026
- Critical9.3WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the adm.cgi binary's reboot_time function that allows unauthen…Check if you run itEPSS 4.10%May 4, 2026
- Medium6.5titra is an open source time tracking project.Check if you run itEPSS 0.37%May 4, 2026
- High8.1OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems.Check if you run itEPSS 0.49%May 4, 2026
- High8.1OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems.Check if you run itEPSS 0.44%May 4, 2026
- Critical9.4In Apache Iceberg, the table's metadata files are control files: they tell readers which data files belong to the table and which table version to read.Check if you run itEPSS 0.59%May 4, 2026
- Critical9.8D-Link DIR-456U Hardware Revision A1 (End-of-Life, EOL) contains a hardcoded telnet backdoor.Check if you run itEPSS 0.85%May 4, 2026
- High8.8D-Link DIR-600L Hardware Revision A1 (End-of-Life) contains a hardcoded telnet backdoor.Check if you run itEPSS 0.98%May 4, 2026
- High8.8D-Link DIR-600L Hardware Revision B1 (End-of-Life) contains a hardcoded telnet backdoor.Check if you run itEPSS 0.98%May 4, 2026
- High8.8D-Link DIR-605L Hardware Revision B2 (End-of-Life, EOL) contains a hardcoded telnet backdoor.Check if you run itEPSS 0.98%May 4, 2026