Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.1A flaw has been found in Sanluan PublicCMS 5.202506.d.Check if you run itEPSS 0.23%May 17, 2026
- Medium5.5A vulnerability was detected in Sanluan PublicCMS 5.202506.d.Check if you run itEPSS 0.28%May 17, 2026
- Medium5.5A security vulnerability has been detected in Sanluan PublicCMS 5.202506.d.Check if you run itEPSS 0.33%May 17, 2026
- Medium5.5A weakness has been identified in Sanluan PublicCMS 5.202506.d.Check if you run itEPSS 0.40%May 17, 2026
- Low0.9A security flaw has been discovered in Oinone Pamirs up to 7.2.0.Check if you run itEPSS 0.22%May 17, 2026
- Low2.1A vulnerability was identified in Oinone Pamirs up to 7.2.0.Check if you run itEPSS 0.24%May 17, 2026
- Medium5.5A vulnerability was determined in Oinone Pamirs up to 7.2.0.Check if you run itEPSS 0.26%May 17, 2026
- Low2.1A vulnerability was found in Investintech SlimPDFReader up to 2.0.13.Check if you run itEPSS 0.26%May 17, 2026
- Low2.1A vulnerability has been found in Open5GS up to 2.7.7.Check if you run itEPSS 0.38%May 17, 2026
- Low2.1A flaw has been found in Open5GS up to 2.7.6.Check if you run itEPSS 0.38%May 17, 2026
- Low2.1A vulnerability was detected in Open5GS up to 2.7.7.Check if you run itEPSS 0.39%May 17, 2026
- Low2.1A security vulnerability has been detected in Open5GS up to 2.7.7.Check if you run itEPSS 0.39%May 17, 2026
- High8.8The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Privilege Escalation in version 3.4.9.Check if you run itEPSS 0.36%May 17, 2026
- Medium5.5A weakness has been identified in CoreWorxLab CAAL up to 1.6.0.Check if you run itEPSS 0.31%May 17, 2026
- Low2.0A security flaw has been discovered in Dataease 2.10.20.Check if you run itEPSS 0.39%May 17, 2026
- Medium6.3### Summary throws when called with and on an array containing or .Check if you run itEPSS 0.40%May 17, 2026
- High8.8Das U-Boot before 2026.04 allows FIT (Flat Image Tree) signature verification bypass because hashed-nodes is omitted from a hash.Check if you run itEPSS 0.21%May 16, 2026
- Medium5.1Quick.CMS 6.7 contains a cross-site scripting vulnerability in the sliders form that allows authenticated attackers to inject malicious scripts by submitting XSS paylo…Check if you run itEPSS 0.18%May 16, 2026
- High7.1Fuel CMS 1.4.13 contains a blind SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the 'col'…Check if you run itEPSS 0.23%May 16, 2026
- High8.7WordPress Plugin Backup and Restore 1.0.3 contains an arbitrary file deletion vulnerability that allows authenticated attackers to delete files by manipulating paramet…Check if you run itEPSS 0.40%May 16, 2026
- Medium6.9ProcessMaker 3.5.4 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting improper path traversal validation.Check if you run itEPSS 0.78%May 16, 2026
- High8.7WordPress Plugin Anti-Malware Security and Bruteforce Firewall 4.20.59 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbit…Check if you run itEPSS 0.65%May 16, 2026
- High8.7TextPattern CMS 4.9.0-dev contains a remote code execution vulnerability that allows authenticated attackers to upload arbitrary PHP files by exploiting the plugin upl…Check if you run itEPSS 0.32%May 16, 2026
- Medium5.1WP Learn Manager 1.1.2 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts through the parameter.Check if you run itEPSS 0.21%May 16, 2026
- High8.5VX Search 13.5.28 contains an unquoted service path vulnerability in both VX Search Server and VX Search Enterprise services that allows local attackers to escalate privileges.Check if you run itEPSS 0.12%May 16, 2026
Sort