Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Improper Control of Generation of Code ('Code Injection') vulnerability in WPMU DEV Broken Link Checker broken-link-checker allows Code Injection.This issue affects Br…Check if you run itEPSS 0.22%Oct 15, 2026
- UnknownCGA-r8v6-mgfr-x546Open the advisoryOct 15, 2026
- Medium4.3A flaw was found in OpenSSH.Check if you run itEPSS 0.26%Oct 15, 2026
- UnknownMalicious code in xapi-lib (npm)Open the advisoryOct 15, 2026
- Critical9.8WordPress Link Whisper Free plugin <= 0.9.7 - PHP Object Injection vulnerabilityCheck if you run itEPSS 0.31%Oct 15, 2026
- High7.1WordPress Link Whisper Free plugin <= 0.9.7 - Cross Site Scripting (XSS) vulnerabilityCheck if you run itEPSS 0.15%Oct 15, 2026
- Critical9.8WordPress Frontend Admin by DynamiApps plugin <= 3.29.13 - Privilege Escalation vulnerabilityCheck if you run itEPSS 0.27%Oct 15, 2026
- Critical9.3WordPress Link Whisper Free plugin <= 0.9.7 - SQL Injection vulnerabilityCheck if you run itEPSS 0.24%Oct 15, 2026
- High7.1WordPress Social Share Buttons plugin <= 1.31 - Cross Site Scripting (XSS) vulnerabilityCheck if you run itEPSS 0.15%Oct 15, 2026
- UnknownCGA-xq7m-hmxx-h4fpOpen the advisoryOct 15, 2026
- UnknownSecurity update for the Linux KernelOpen the advisoryOct 15, 2026
- UnknownSecurity update for opensshOpen the advisoryOct 15, 2026
- UnknownSecurity update for muttOpen the advisoryOct 15, 2026
- High8.2Enterprise Architect is vulnerable to XML External Entity (XXE) injection in the XSLT Debugger feature.Check if you run itEPSS 0.28%Oct 15, 2026
- High8.8Important: hplip security, bug fix, and enhancement updateOpen the advisoryOct 15, 2026
- Critical9.3ipv4: validate checksum_start before completing checksumPatch nowKEVEPSS 21.00%Oct 15, 2026
- High7.5In versions till , The default rate-limit key resolver, , derives the per-client bucket key from the leftmost element of the request header.Check if you run itEPSS 0.34%Oct 15, 2026
- High7.8Important: kernel-rt security updateOpen the advisoryOct 15, 2026
- High7.3Moderate: environment-modules security updateOpen the advisoryOct 15, 2026
- High8.1Important: kernel security updateOpen the advisoryOct 15, 2026
- UnknownIn versions till , The default rate-limit key resolver, , derives the per-client bucket key from the leftmost element of the request header.Check if you run itEPSS 0.27%Oct 15, 2026
- Critical9.3WordPress Mang Board WP plugin <= 2.4.4 - SQL Injection vulnerabilityCheck if you run itEPSS 0.29%Oct 15, 2026
- High7.1WordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerabilityCheck if you run itEPSS 0.16%Oct 15, 2026
- High8.8Incorrect Privilege Assignment vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Privilege Escalation.This issue affects Fluent CRM: from n/a through 3.2.5.Check if you run itEPSS 0.29%Oct 15, 2026
- Criticalipv4: free inet_opt and ireq_opt after an RCU grace periodCheck if you run itEPSS 0.17%Oct 15, 2026