Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Imager::File::GIF versions through 1.002 for Perl allow a heap out of bounds (OOB) write on crafted multi-frame GIF files.Check if you run itEPSS 0.19%May 15, 2026
- Medium5.5Permission control vulnerability in the security control module.Check if you run itEPSS 0.08%May 15, 2026
- Medium6.8Out-of-bounds write vulnerability in the distributed file system module.Check if you run itEPSS 0.13%May 15, 2026
- Medium6.2Permission control vulnerability in the projection module.Check if you run itEPSS 0.10%May 15, 2026
- Medium5.9Permission control vulnerability in the manufacturability design module.Check if you run itEPSS 0.08%May 15, 2026
- Medium5.9Permission control vulnerability in the manufacturability design module.Check if you run itEPSS 0.08%May 15, 2026
- Medium5.6Permission control vulnerability in the smart sensing service.Check if you run itEPSS 0.11%May 15, 2026
- Medium5.6Use-After-Free (UAF) vulnerability in the web.Check if you run itEPSS 0.13%May 15, 2026
- High8.4Permission control vulnerability in the web.Check if you run itEPSS 0.07%May 15, 2026
- Low2.8Stack overflow vulnerability in the media platform.Check if you run itEPSS 0.08%May 15, 2026
- Low3.6Permission control vulnerability in the app management and control module.Check if you run itEPSS 0.08%May 15, 2026
- Medium5.9Permission control vulnerability in contacts.Check if you run itEPSS 0.08%May 15, 2026
- Medium5.8Permission control vulnerability in calls.Check if you run itEPSS 0.09%May 15, 2026
- Medium4.3The Notify Odoo plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1.Check if you run itEPSS 0.14%May 15, 2026
- Medium4.3The Classified Listing – AI-Powered Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized access in all versions up to, and inc…Check if you run itEPSS 0.27%May 15, 2026
- Medium4.9The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'table' parameter in all versions up t…Check if you run itEPSS 0.36%May 15, 2026
- Medium6.4The Advanced Custom Fields: Font Awesome plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 5.0.2.Check if you run itEPSS 0.27%May 15, 2026
- High7.5The Quick Playground plugin for WordPress is vulnerable to Path Traversal in versions up to and including 1.3.3.Check if you run itEPSS 0.81%May 15, 2026
- High8.8The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Privilege Escalation in versions up to and including 3.28.36.Patch nowKEVEPSS 0.44%May 15, 2026
- Critical9.8The Form Notify plugin for WordPress is vulnerable to Authentication Bypass in versions up to and including 1.1.10.Check if you run itEPSS 0.73%May 15, 2026
- Medium6.5The Smartcat Translator for WPML plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'routeData' REST endp…Check if you run itEPSS 0.26%May 15, 2026
- High8.6SzafirHost verifies the signature of the downloaded JAR file using class JarInputStream (reading from the beginning of the file), but loads classes using class JarFile…Check if you run itEPSS 0.45%May 15, 2026
- High8.7Improper input validation in Delphix Continuous Data connectors allows an authenticated user to execute arbitrary operating system commands on the staging or target host.Check if you run itEPSS 0.23%May 15, 2026
- Medium6.4The The7 theme for WordPress is vulnerable to Stored Cross-Site Scripting via the 'dt_default_button' shortcode in all versions up to, and including, 14.3.2.Check if you run itEPSS 0.28%May 15, 2026
- High8.1The FOX – Currency Switcher Professional for WooCommerce plugin for WordPress is vulnerable to unauthorized data loss due to a missing capability check on the 'admin_h…Check if you run itEPSS 0.27%May 15, 2026
Sort