Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1In the Linux kernel, the following vulnerability has been resolved: crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed When retrieving the…Check if you run itEPSS 0.13%May 1, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed When retrieving the ID for…Check if you run itEPSS 0.13%May 1, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix missing validation of ticket length in non-XDR key preparsing In rxrpc_preparse(), there…Check if you run itEPSS 0.14%May 1, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free Currently we execute for the virt_wi…Check if you run itEPSS 0.13%May 1, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: fuse: reject oversized dirents in page cache fuse_add_dirent_to_cache() computes a serialized diren…Check if you run itEPSS 0.28%May 1, 2026
- Low2.1A security vulnerability has been detected in alexta69 MeTube up to 2026.04.09.Check if you run itEPSS 0.17%May 1, 2026
- Low1.9A vulnerability was detected in Exiftool up to 13.53.Check if you run itEPSS 0.18%May 1, 2026
- Medium5.5A security vulnerability has been detected in AstrBotDevs AstrBot up to 4.16.0.Check if you run itEPSS 0.29%May 1, 2026
- High8.8The WP Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.9.2.Check if you run itEPSS 0.17%May 1, 2026
- Medium4.3The Ultimate Dashboard plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.8.14.Check if you run itEPSS 0.15%May 1, 2026
- Low2.0A weakness has been identified in MacCMS Pro up to 2022.1.3.Check if you run itEPSS 0.23%May 1, 2026
- Critical9.8The fix for CVE-2026-41635 was not applied to the 2.1.X and 2.2.X branches.Check if you run itEPSS 1.23%May 1, 2026
- Critical9.8The fix for CVE-2026-41409 was not applied to the 2.1.X and 2.2.X branches.Check if you run itEPSS 0.66%May 1, 2026
- High7.2Apache Neethi does not impose any restrictions on URIs when manually fetching remote policy references through the PolicyReference API.Check if you run itEPSS 0.50%May 1, 2026
- Critical9.8The Temporary Login plugin for WordPress is vulnerable to Authentication Bypass in versions up to and including 1.0.0.Check if you run itEPSS 9.25%May 1, 2026
- High7.5An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0.Check if you run itEPSS 0.98%May 1, 2026
- High8.0An issue was discovered in OpenStack Keystone before 29.0.2.Check if you run itEPSS 0.47%May 1, 2026
- High7.5Apache Neethi does not properly detect circular references in policy definitions.Check if you run itEPSS 0.76%May 1, 2026
- High7.5Apache Neethi is vulnerable to a Denial of Service attack through algorithmic complexity in policy normalization.Check if you run itEPSS 0.71%May 1, 2026
- Medium5.4@diplodoc/search-extension 1.0.0 through 3.x before 3.0.3 allows stored XSS via the title in a .md file.Check if you run itEPSS 0.24%May 1, 2026
- High8.4The LabOne Q serialization framework uses a class-loading mechanism (import_cls) to dynamically import and instantiate Python classes during deserialization.Check if you run itEPSS 0.26%May 1, 2026
- Critical10.0JS8Call through 2.3.1 and JS8Call-improved before 3.0 have a stack-based buffer overflow via a radio transmission of @APRSIS GRID followed by a long Maidenhead locator.Check if you run itEPSS 0.57%May 1, 2026
- Medium5.5A vulnerability was identified in itsourcecode Electronic Judging System 1.0.Check if you run itEPSS 0.26%May 1, 2026
- Low2.9A vulnerability was determined in D-Link M60 up to 1.20B02.Check if you run itEPSS 1.10%May 1, 2026
- Medium6.4The Elementor Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the _elementor_data meta field in versions up to, and including, 4.0.4.Check if you run itEPSS 0.22%May 1, 2026
Sort