Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.4The LatePoint plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to and including 5.5.0.Check if you run itEPSS 0.34%May 6, 2026
- High7.2The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'booking_form_page_url' p…Check if you run itEPSS 0.45%May 6, 2026
- Medium6.4The Affiliate Program Suite — SliceWP Affiliates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcode attributes in all versions up to, and…Check if you run itEPSS 0.15%May 6, 2026
- Medium4.9The Fluent Forms plugin for WordPress is vulnerable to Arbitrary File Read in versions up to and including 6.2.1.Check if you run itEPSS 0.55%May 6, 2026
- Medium6.1Vulnerability in the Oracle OCI CLI product of Oracle Open Source Projects.Check if you run itEPSS 0.15%May 6, 2026
- Medium4.7Vulnerability in the Oracle Macoron Tool product of Oracle Open Source Projects.Check if you run itEPSS 0.15%May 6, 2026
- High7.3The Item history widget (in Zabbix 7.0+) or the Plain text widget (in Zabbix 6.0) can execute injected JavaScript when HTML display is enabled.Check if you run itEPSS 0.26%May 6, 2026
- Medium5.1A user able to connect to Agent 2 can inject an Oracle TNS connection string via the 'service' parameter.Check if you run itEPSS 0.22%May 6, 2026
- High7.3An authenticated (non-super) administrator can create a maintenance period with a JavaScript payload that is executed by any user that opens tooltip for that maintenan…Check if you run itEPSS 0.26%May 6, 2026
- Medium4.3The Ninja Tables – Easy Data Table Builder plugin for WordPress is vulnerable to unauthorized database table creation due to missing authorization checks on the functi…Check if you run itEPSS 0.25%May 6, 2026
- Medium6.5The All-in-One WP Migration Unlimited Extension plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 2.83.Check if you run itEPSS 0.27%May 6, 2026
- Medium5.3The Mercado Pago payments for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'mp_pix_image' Woo…Check if you run itEPSS 0.50%May 6, 2026
- High7.7An authorization bypass (CWE-639) in the GetUserRoles gRPC API endpoint in Velocidex Velociraptor below version 0.76.5 allows any authenticated low-privilege user to r…Check if you run itEPSS 0.26%May 6, 2026
- Medium5.5An off-by-one error (CWE-193) in the ConsumeUnit16Array and ConsumeUnit64Array functions in Velocidex Velociraptor before version 0.76.5 on Windows and Linux allows a…Check if you run itEPSS 0.14%May 6, 2026
- High7.5In nr modem, there is a possible improper input validation.Check if you run itEPSS 0.30%May 6, 2026
- High7.5In Modem IMS, there is a possible improper input validation.Check if you run itEPSS 0.31%May 6, 2026
- High7.5In Modem IMS, there is a possible improper input validation.Check if you run itEPSS 0.32%May 6, 2026
- High7.5In Modem IMS, there is a possible improper input validation.Check if you run itEPSS 0.32%May 6, 2026
- High7.5In Modem IMS, there is a possible improper input validation.Check if you run itEPSS 0.33%May 6, 2026
- High7.5In IMS, there is a possible system crash due to improper input validation.Check if you run itEPSS 0.30%May 6, 2026
- Low3.4In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm.Check if you run itEPSS 0.11%May 6, 2026
- High7.6Jupyter Server is the backend for Jupyter web applications.Check if you run itEPSS 0.33%May 5, 2026
- High7.6Jupyter Server is the backend for Jupyter web applications.Check if you run itEPSS 0.31%May 5, 2026
- High8.2OpenMRS Core is an open source electronic medical record system platform.Check if you run itEPSS 0.56%May 5, 2026
- Critical9.8Heap-based Buffer Overflow vulnerability in mod_proxy_ajp of Apache HTTP Server.Check if you run itEPSS 1.38%May 5, 2026
Sort