Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.6A flaw was found in OVN (Open Virtual Network).Check if you run itEPSS 0.87%Apr 24, 2026
- Medium6.5When generating an ICMP Destination Unreachable or Packet Too Big response, the handler copies a portion of the original packet into the ICMP error body using the IP header's self-Check if you run itEPSS 0.63%Apr 24, 2026
- Medium4.3The asset dependency graph did not restrict nodes by the viewer's DAG read permissions: a user with read access to at least one DAG could browse the asset graph for an…Check if you run itEPSS 0.35%Apr 24, 2026
- Medium4.3The authenticated /ui/dags endpoint did not enforce per-DAG access control on embedded Human-in-the-Loop (HITL) and TaskInstance records: a logged-in Airflow user with…Check if you run itEPSS 0.35%Apr 24, 2026
- Critical9.9Exposure of sensitive information to an unauthorized actor in Azure IOT Central allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.70%Apr 24, 2026
- High8.8P4 Server versions prior to 2026.1 are configured with insecure default settings that, when exposed to untrusted networks, allow unauthenticated attackers to create ar…Check if you run itEPSS 1.26%Apr 24, 2026
- Low2.4AdaptiveGRC is vulnerable to Stored XSS via text type fields across the forms.Check if you run itEPSS 0.59%Apr 24, 2026
- High8.1Incorrect Authorization vulnerability in Apache DolphinScheduler allows authenticated users with system login permissions to use tenants that are not defined on the pl…Check if you run itEPSS 0.45%Apr 24, 2026
- High8.8Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ, Apache ActiveMQ Broker, Apache ActiveMQ All.Check if you run itEPSS 0.98%Apr 24, 2026
- Medium6.5Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Apache ActiveMQ, Apache ActiveMQ Web.Check if you run itEPSS 0.56%Apr 24, 2026
- High8.8Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ.Patch nowKEVEPSS 4.78%Apr 24, 2026
- Medium6.3Deserialization of Untrusted Data vulnerability in Apache DolphinScheduler RPC module.Check if you run itEPSS 0.54%Apr 24, 2026
- High8.5A client holding only a read JWT scope can still register itself as a signal provider through the production kuksa.val.v2 OpenProviderStream API by sending ProvideSignalRequest.Check if you run itEPSS 0.32%Apr 24, 2026
- High7.5Tempo queries with large limits can cause large memory allocations which can impact the availability of the service, depending on its deployment strategy.Check if you run itEPSS 0.64%Apr 24, 2026
- Medium6.4The ITERAS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple shortcodes (iteras-ordering, iteras-signup, iteras-paywall-login, iteras-self…Check if you run itEPSS 0.26%Apr 24, 2026
- Medium5.3The Liaison Site Prober plugin for WordPress is vulnerable to Information Exposure in all versions up to and including 1.2.1 via the /wp-json/site-prober/v1/logs REST API endpoint.Check if you run itEPSS 0.37%Apr 24, 2026
- Medium4.3The Taqnix plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.3.Check if you run itEPSS 0.17%Apr 24, 2026
- Medium4.3The HubSpot All-In-One Marketing - Forms, Popups, Live Chat plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including,…Check if you run itEPSS 0.19%Apr 24, 2026
- High7.5Delta Electronics AS320T has denial of service via the undocumented subfunction vulnerability.Check if you run itEPSS 0.27%Apr 24, 2026
- Critical9.8Delta Electronics AS320T has no checking of the length of the buffer with the directory name vulnerability.Check if you run itEPSS 0.61%Apr 24, 2026
- Critical9.8Delta Electronics AS320T has No checking of the length of the buffer with the file name vulnerability.Check if you run itEPSS 0.31%Apr 24, 2026
- Medium5.3The Booking Calendar Contact Form plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.2.63 via the dex_bccf_…Check if you run itEPSS 0.33%Apr 24, 2026
- Medium6.4The Royal Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image captions in the Image Grid/Slider/Carousel widget in versions up…Check if you run itEPSS 0.26%Apr 24, 2026
- High8.1The Drag and Drop File Upload for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file upload in versions up to, and including, 1.1.3.Check if you run itEPSS 1.06%Apr 24, 2026
- Medium5.3The HM Books Gallery plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 4.8.0.Check if you run itEPSS 0.32%Apr 24, 2026
Sort