Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1WordPress Plugin Buddypress 6.2.0 contains a persistent cross-site scripting vulnerability that allows authenticated attackers with moderator privileges to inject mali…Check if you run itEPSS 0.28%May 16, 2026
- High8.5Advanced System Care Service 13.0.0.157 contains an unquoted service path vulnerability in the AdvancedSystemCareService13 service binary path that allows local attack…Check if you run itEPSS 0.12%May 16, 2026
- High8.5Privacy Drive 3.17.0 contains an unquoted service path vulnerability in the pdsvc.exe service binary that allows local attackers to escalate privileges by exploiting t…Check if you run itEPSS 0.12%May 16, 2026
- High8.5Syncplify.me Server! 5.0.37 contains an unquoted service path vulnerability in the SMWebRestServicev5 service that allows local attackers to escalate privileges by exp…Check if you run itEPSS 0.11%May 16, 2026
- High8.5OKI sPSV Port Manager 1.0.41 contains an unquoted service path vulnerability in the sPSVOpLclSrv service that allows local attackers to escalate privileges by insertin…Check if you run itEPSS 0.11%May 16, 2026
- Critical9.3iDS6 DSSPro Digital Signage System 6.2 contains a CAPTCHA security bypass vulnerability that allows attackers to bypass authentication by requesting the autoLoginVerifyCode object.Check if you run itEPSS 0.43%May 16, 2026
- High8.7HS Brand Logo Slider 2.1 contains an unrestricted file upload vulnerability that allows authenticated users to bypass client-side file extension validation by uploadin…Check if you run itEPSS 0.54%May 16, 2026
- Medium6.5Net::Statsd::Lite versions before 0.9.0 for Perl allowed metric injections.Check if you run itEPSS 0.31%May 16, 2026
- Medium4.3The Multicollab: Content Team Collaboration and Editorial Workflow plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability…Check if you run itEPSS 0.24%May 16, 2026
- High7.8Versions of the package jsondiffpatch before 0.7.6 are vulnerable to Prototype Pollution via the jsondiffpatch.patch() and jsondiffpatch/formatters/jsonpatch.patch() APIs.Check if you run itEPSS 0.38%May 16, 2026
- Low2.0Versions of the package jsondiffpatch before 0.7.6 are vulnerable to Cross-site Scripting (XSS) via the annotated formatter due to improper sanitization of JSON values…Check if you run itEPSS 0.19%May 16, 2026
- Medium5.3The Essential Chat Support plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.0.1.Check if you run itEPSS 0.32%May 16, 2026
- Medium6.5Crypt::DSA versions through 1.19 for Perl use 2-args open, allowing existing files to be modified.Check if you run itEPSS 0.32%May 15, 2026
- High7.3Crypt::DSA versions before 1.20 for Perl generate seeds using rand.Check if you run itEPSS 0.36%May 15, 2026
- Medium6.5Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Check if you run itEPSS 0.34%May 15, 2026
- Medium6.5Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Check if you run itEPSS 0.28%May 15, 2026
- High8.1Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Check if you run itEPSS 0.34%May 15, 2026
- Medium5.4Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Check if you run itEPSS 0.19%May 15, 2026
- Medium6.5Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Check if you run itEPSS 0.28%May 15, 2026
- High7.1Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Check if you run itEPSS 0.27%May 15, 2026
- Medium5.4Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Check if you run itEPSS 0.19%May 15, 2026
- Medium5.1Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Check if you run itEPSS 0.17%May 15, 2026
- Medium6.5Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Check if you run itEPSS 0.23%May 15, 2026
- High7.7Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Check if you run itEPSS 0.40%May 15, 2026
- Medium5.4Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Check if you run itEPSS 0.21%May 15, 2026
Sort