Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5Double free vulnerability in the window module.Check if you run itEPSS 0.07%Mar 5, 2026
- Low3.3HCL Sametime for iOS is impacted by a sensitive information disclosure.Check if you run itEPSS 0.11%Mar 5, 2026
- High8.1The Membership Plugin – Restrict Content plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.2.20.Check if you run itEPSS 0.37%Mar 5, 2026
- Critical10.0Arbitrary File Write via Path Traversal upload to Remote Code Execution in SeppMail User Web Interface.Check if you run itEPSS 0.89%Mar 5, 2026
- Critical9.8dns_unpack_name() caches the buffer tailroom once and reuses it while appending DNS labels.Check if you run itEPSS 0.40%Mar 5, 2026
- Medium6.9EC-CUBE provided by EC-CUBE CO.,LTD.Check if you run itEPSS 0.35%Mar 5, 2026
- Critical9.1The Login with Salesforce WordPress plugin through 1.0.2 does not validate that users are allowed to login through Salesforce, allowing unauthenticated users to be aut…Check if you run itEPSS 0.34%Mar 5, 2026
- High8.6IDC SFX2100 Satellite Receiver firmware ships with multiple daemon configuration files for routing components (e.g., zebra, bgpd, ospfd, and ripd) that are owned by ro…Check if you run itEPSS 0.29%Mar 5, 2026
- High8.2Inclusion of Functionality from Untrusted Control Sphere vulnerability in WP Royal Royal Elementor Addons royal-elementor-addons allows Accessing Functionality Not Pro…Check if you run itEPSS 0.24%Mar 5, 2026
- Critical9.1Unrestricted Upload of File with Dangerous Type vulnerability in firassaidi WooCommerce License Manager fs-license-manager allows Upload a Web Shell to a Web Server.Th…Check if you run itEPSS 0.29%Mar 5, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LambertGroup LambertGroup - AllInOne - Banner with Thumbnails all…Check if you run itEPSS 0.19%Mar 5, 2026
- Medium6.5Missing Authorization vulnerability in Aryan Shirani Bid Abadi Site Suggest site-suggest allows Accessing Functionality Not Properly Constrained by ACLs.This issue aff…Check if you run itEPSS 0.26%Mar 5, 2026
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Daiquiri daiquiri allows PHP Local Fi…Check if you run itEPSS 0.43%Mar 5, 2026
- Medium6.5Missing Authorization vulnerability in Brainstorm_Force Ultimate Addons for WPBakery Page Builder ultimate_vc_addons allows Exploiting Incorrectly Configured Access Co…Check if you run itEPSS 0.30%Mar 5, 2026
- Critical9.0Improper Validation of Specified Quantity in Input vulnerability in BoldGrid W3 Total Cache w3-total-cache allows Accessing Functionality Not Properly Constrained by A…Check if you run itEPSS 0.32%Mar 5, 2026
- High7.5Missing Authorization vulnerability in vanquish WooCommerce Order Details woocommerce-order-details allows Exploiting Incorrectly Configured Access Control Security Le…Check if you run itEPSS 0.30%Mar 5, 2026
- High8.8Deserialization of Untrusted Data vulnerability in AivahThemes Car Zone carzone allows Object Injection.This issue affects Car Zone: from n/a through <= 3.7.Check if you run itEPSS 0.43%Mar 5, 2026
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes AC Services | HVAC, Air Conditioni…Check if you run itEPSS 0.43%Mar 5, 2026
- High8.1Deserialization of Untrusted Data vulnerability in axiomthemes Au Pair Agency - Babysitting & Nanny Theme au-pair-agency allows Object Injection.This issue affects Au…Check if you run itEPSS 0.33%Mar 5, 2026
- Critical9.1Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine ai-engine allows Using Malicious Files.This issue affects AI Engine: from n/a thr…Check if you run itEPSS 0.49%Mar 5, 2026
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Tooth Fairy tooth-fairy allows PH…Check if you run itEPSS 0.55%Mar 5, 2026
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes SetSail setsail allows PHP Local…Check if you run itEPSS 0.53%Mar 5, 2026
- High8.5UPS Multi-UPS Management Console (MUMC) version 01.06.0001 (A03) contains an Incorrect Default Permissions (CWE-276) vulnerability that allows an attacker to execute a…Check if you run itEPSS 0.17%Mar 5, 2026
- High8.4UPS Multi-UPS Management Console (MUMC) version 01.06.0001 (A03) contains an Unquoted Search Path or Element (CWE-428) vulnerability, which allows a user with write ac…Check if you run itEPSS 0.18%Mar 5, 2026
- High8.5Incorrect permission assignment (world-writable file) in /etc/udhcpc/default.script in International Data Casting (IDC) SFX2100 Satellite Receiver allows a local unpri…Check if you run itEPSS 0.15%Mar 5, 2026
Sort