Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Gnutls: gnutls: authentication bypass via nul character in usernameCheck if you run itEPSS 1.05%May 7, 2026
- High8.2Lack of user input validation in the file upload functionality of Open Notebook v1.8.3 allows the application user to access local files content from the docker contai…Check if you run itEPSS 0.18%May 7, 2026
- High7.0Lack of user input validation in the file upload functionality of Open Notebook v1.8.3 allows the application user to create or modify files on the docker container vi…Check if you run itEPSS 0.18%May 7, 2026
- Critical9.2Lack of user input sanitisation in Open Notebook v1.8.3 allows the application user to execute Python code (and subsequently OS commands) on the docker container via S…Check if you run itEPSS 0.23%May 7, 2026
- High8.7An improper input validation, together with an overly permissive default CORS configuration in Open Notebook v1.8.1 allows remote attacker to trick a legitimate user t…Check if you run itEPSS 0.14%May 7, 2026
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in PluginUs.Net BEAR allows Cross Site Request Forgery.Check if you run itEPSS 0.10%May 7, 2026
- Medium6.9Vulnerability on the external sharing feature in Cryptobox allows an attacker knowing a sharing link URL to retrieve information from the server allowing an offline br…Check if you run itEPSS 0.23%May 7, 2026
- High7.5A remote denial-of-service vulnerability exists in the ZTE Cloud PC client uSmartview, which may lead to memory corruption and remote denial of service.Check if you run itEPSS 0.27%May 7, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WProyal Royal Elementor Addons allows Stored XSS.Check if you run itEPSS 0.18%May 7, 2026
- Medium5.3Missing Authorization vulnerability in bPlugins PDF Poster allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.18%May 7, 2026
- Medium5.3Authorization Bypass Through User-Controlled Key vulnerability in YITH YITH WooCommerce Wishlist allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.32%May 7, 2026
- Medium5.3Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in weDevs Happy Addons for Elementor allows Retrieve Embedded Sensitive Data.Check if you run itEPSS 0.34%May 7, 2026
- Medium5.3Missing Authorization vulnerability in WProyal Royal Elementor Addons allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.24%May 7, 2026
- Medium5.4Cross-Site Request Forgery (CSRF) vulnerability in WPGraphQL allows Cross Site Request Forgery.Check if you run itEPSS 0.09%May 7, 2026
- High7.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPMart Team Member allows Blind SQL Injection.Check if you run itEPSS 0.23%May 7, 2026
- Medium5.3Missing Authorization vulnerability in Magepeople inc.Check if you run itEPSS 0.17%May 7, 2026
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WEN Themes WEN Logo Slider allows DOM-Based XSS.Check if you run itEPSS 0.14%May 7, 2026
- Medium5.3Improper restriction of excessive authentication attempts vulnerability in Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900,…Check if you run itEPSS 0.30%May 7, 2026
- Critical9.8Remote Code Execution Vulnerability in Hitachi Storage Navigator and the maintenance console in Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F3…Check if you run itEPSS 0.55%May 7, 2026
- High8.0A low privileged remote attacker can gain the root password due to improper removal of sensitive information before storage or transfer.Check if you run itEPSS 0.34%May 7, 2026
- Medium5.4Out-of-bounds write vulnerability in The Document Foundation LibreOffice via crafted OOXML documents with mismatched encryption salt parameters.Check if you run itEPSS 0.08%May 7, 2026
- High7.8ZTE Cloud PC client uSmartView contains a DLL hijacking vulnerability; since uSmartViewServiceAgent.exe runs with SYSTEM privileges, successful hijacking enables local…Check if you run itEPSS 0.16%May 7, 2026
- Critical9.8OS command injection vulneravility in the management gui (maintenance utility) of Hitachi Virtual Storage Platform One Block 23, 24, 26 and 28.Check if you run itEPSS 0.90%May 7, 2026
- High7.1An authenticated user can crash mongod when running $rankFusion or $scoreFusion with an empty pipeline on a view.Check if you run itEPSS 0.23%May 7, 2026
- High8.1The WP-Optimize – Cache, Compress images, Minify & Clean database to boost page speed & performance plugin for WordPress is vulnerable to arbitrary file deletion due t…Check if you run itEPSS 0.95%May 7, 2026
Sort