Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3The HubSpot All-In-One Marketing - Forms, Popups, Live Chat plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including,…Check if you run itEPSS 0.19%Apr 24, 2026
- Medium5.3The Booking Calendar Contact Form plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.2.63 via the dex_bccf_…Check if you run itEPSS 0.43%Apr 24, 2026
- High8.1The Drag and Drop File Upload for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file upload in versions up to, and including, 1.1.3.Check if you run itEPSS 1.14%Apr 24, 2026
- Medium5.3The HM Books Gallery plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 4.8.0.Check if you run itEPSS 0.42%Apr 24, 2026
- Medium5.3The ExactMetrics – Google Analytics Dashboard for WordPress plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 9.1.2.Check if you run itEPSS 0.52%Apr 24, 2026
- High7.7Kyverno is a policy engine designed for cloud native platform engineering teams.Check if you run itEPSS 0.57%Apr 24, 2026
- Critical9.1Kyverno is a policy engine designed for cloud native platform engineering teams.Check if you run itEPSS 0.57%Apr 24, 2026
- High7.7Kyverno is a policy engine designed for cloud native platform engineering teams.Check if you run itEPSS 0.37%Apr 24, 2026
- Medium5.3The MaxiBlocks Builder plugin for WordPress is vulnerable to arbitrary media file deletion due to insufficient file ownership validation on the 'maxi_remove_custom_ima…Check if you run itEPSS 0.32%Apr 24, 2026
- High8.8Actual is a local-first personal finance tool.Check if you run itEPSS 0.59%Apr 24, 2026
- Medium4.9Xibo is an open source digital signage platform with a web content management system and Windows display player software.Check if you run itEPSS 0.48%Apr 24, 2026
- Medium5.4Xibo is an open source digital signage platform with a web content management system and Windows display player software.Check if you run itEPSS 0.24%Apr 24, 2026
- Critical9.3A vulnerability in SenseLive X3050’s embedded management service allows full administrative control to be established without any form of authentication or authorizati…Check if you run itEPSS 0.83%Apr 24, 2026
- Medium6.9A vulnerability exists in SenseLive X3050’s web management interface due to its reliance on unencrypted HTTP for all administrative communication.Check if you run itEPSS 0.31%Apr 24, 2026
- Critical9.3A vulnerability in SenseLive X3050’s web management interface allows authentication logic to be performed entirely on the client side, relying on hardcoded values with…Check if you run itEPSS 0.84%Apr 24, 2026
- Medium6.9A vulnerability exists in SenseLive X3050’s web management interface due to improper session lifetime enforcement, allowing authenticated sessions to remain active for…Check if you run itEPSS 0.40%Apr 24, 2026
- Medium6.9A vulnerability in the browser-based remote management interface may allow an administrator to access sensitive information on the device via crafted requests, affecti…Check if you run itEPSS 0.29%Apr 24, 2026
- High7.1OpenClaw before 2026.3.28 contains a privilege escalation vulnerability allowing authenticated operators with write permissions to access admin-class Telegram configur…Check if you run itEPSS 0.43%Apr 23, 2026
- Medium5.3OpenClaw before 2026.3.28 contains a privilege escalation vulnerability in the chat.send endpoint that allows write-scoped gateway callers to persist admin-only verbos…Check if you run itEPSS 0.39%Apr 23, 2026
- Medium5.3OpenClaw before 2026.4.2 exposes configPath and stateDir metadata in Gateway connect success snapshots to non-admin authenticated clients.Check if you run itEPSS 0.37%Apr 23, 2026
- Medium5.4pretalx is a conference planning tool.Check if you run itEPSS 0.27%Apr 23, 2026
- Critical9.3SocialEngine versions 7.8.0 and prior contain a SQL injection vulnerability in the /activity/index/get-memberall endpoint where user-supplied input passed via the text…Check if you run itEPSS 1.01%Apr 23, 2026
- Low3.5The reCaptcha by WebDesignBy WordPress plugin before 2.0 does not sanitize or escape the Site Key setting before outputting it in a JavaScript string context via the g…Check if you run itEPSS 0.24%Apr 23, 2026
- High7.0IP Setting Software contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries.Check if you run itEPSS 0.16%Apr 23, 2026
- Medium5.4Froxlor is open source server administration software.Check if you run itEPSS 0.38%Apr 23, 2026