Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5The Membership & User Roles for WooCommerce (Automatic Role Changer) plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 20260828.Check if you run itEPSS 0.34%Oct 13, 2026
- Medium6.9Axios is a promise-based HTTP client for the browser and Node.js.Check if you run itEPSS 0.53%Oct 13, 2026
- Unknownlinux vulnerabilitiesOpen the advisoryOct 13, 2026
- Medium4.3The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.18 via the ai…Check if you run itEPSS 0.24%Oct 13, 2026
- High7.1OpenS100 through commit 2b1dafc contains an integer overflow vulnerability in the S-102 Bathymetric Surface parser.Check if you run itEPSS 0.13%Oct 13, 2026
- Low2.1A vulnerability was found in k2-fsa sherpa-onnx up to 1.13.8.Check if you run itEPSS 0.27%Oct 13, 2026
- Low2.7GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain condition…Check if you run itEPSS 0.21%Oct 13, 2026
- Critical9.8The Metasploit Framework Web Service REST API (msf-ws) exposes the credential store through Msf::WebServices::CredentialServlet.Check if you run itEPSS 0.37%Oct 13, 2026
- UnknownMalicious code in @user-interface-common/common-styles (npm)Open the advisoryOct 13, 2026
- UnknownMalicious code in @newspage/lib-ng-async-routes-ui (npm)Open the advisoryOct 13, 2026
- MediumThe Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Stored Cross-Site Scripting via the user profile 'Author Page' social link…Check if you run itEPSS 0.16%Oct 13, 2026
- UnknownThemeum tutor_lms Deserialization of Untrusted DataPatch nowKEVEPSS 1.07%Oct 13, 2026
- Unknownwpforms wpforms Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 2.48%Oct 13, 2026
- Medium4.3Nango is an open-source platform for connecting agents and products to third-party APIs.Check if you run itEPSS 0.23%Oct 12, 2026
- Medium5.7Super Productivity is an advanced todo list app with integrated timeboxing and time tracking capabilities.Check if you run itEPSS 0.13%Oct 12, 2026
- Medium6.4A flaw was found in Quay.Check if you run itEPSS 0.21%Oct 12, 2026
- Medium4.0In Progress ShareFile Storage Zones Controller v5.12.6 and below, processing of queue items can send acknowledgements to an unvalidated callback URL, this behavior tog…Check if you run itEPSS 0.07%Oct 12, 2026
- High8.8The Metasploit Framework post module post/apple_ios/gather/ios_image_gather is affected by a relative path traversal vulnerability (CWE-22).Check if you run itEPSS 0.41%Oct 12, 2026
- UnknownMalicious code in @s4yhiitestpoc/scan-https-d (npm)Open the advisoryOct 11, 2026
- Medium5.3LLMGateway through 1.20.0 contains a blind server-side request forgery vulnerability that allows API key holders to reach internal hosts via the video-generation callb…Check if you run itEPSS 0.28%Oct 11, 2026
- UnknownMalicious code in hd-wallet-generator (RubyGems)Open the advisoryOct 11, 2026
- UnknownSecurity update for busyboxOpen the advisoryOct 10, 2026
- Medium5.3Immich through 3.3.1 contains a missing authorization vulnerability in the partner synchronization stream that allows authenticated partners to read Locked Folder asse…Open the advisoryOct 10, 2026
- UnknownMalicious code in agentaix (PyPI)Open the advisoryOct 10, 2026
- Medium6.4The Team – Team Members Showcase Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ttp_filter_taxonomy (meta of the attacker-chosen pos…Check if you run itEPSS 0.19%Oct 10, 2026