Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8cpu: hotplug: Bound hotplug states sysfs outputCheck if you run itEPSS 0.18%Aug 15, 2026
- Medium4.9The Invisible Anti-Spam & CAPTCHA — reCAPTCHA Alternative for All Forms plugin for WordPress is vulnerable to generic SQL Injection via the 'key' parameter in all vers…Check if you run itEPSS 0.58%Aug 15, 2026
- High7.2The Online Booking & Scheduling Calendar for WordPress by vcita plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'business_id' parameter in al…Check if you run itEPSS 0.42%Aug 15, 2026
- Unknownpodsfoundation pods Incorrect AuthorizationPatch nowKEVEPSS 2.30%Aug 15, 2026
- Unknowncozmoslabs profile_builder Incorrect Type Conversion or CastPatch nowKEVEPSS 3.90%Aug 15, 2026
- Medium6.3In OpenStack Ironic before 38.0.1, the autodetect deploy interface may fail to run cleaning immediately after enrollment with, or changing to, the autodetect deploy interface.Check if you run itEPSS 0.30%Aug 14, 2026
- Medium6.5A flaw was found in Samba's CTDB, the clustered database service used by Samba.Check if you run itEPSS 0.34%Aug 14, 2026
- UnknownPath-traversal vulnerability in QOS.CH Sarl Logback-classic on Java (logback-classic module) allows path-traversal vulnerability.Check if you run itEPSS 0.33%Aug 14, 2026
- Medium5.8Duplicate Advisory: authFilePublishAccess distinguishes hidden and forbidden documents from public and nonexistent ones, and issues a publish-auth cookie for documents it reports aOpen the advisoryAug 14, 2026
- Medium5.8Duplicate Advisory: SiYuan: The publish filter for database backlinks consults the forbidden list instead of the visibility list, disclosing hidden-tier documents to anonymous readOpen the advisoryAug 14, 2026
- UnknownBIP-322 address ownership verification bypass for P2WPKH and P2SH-P2WPKH addressesOpen the advisoryAug 14, 2026
- High7.8CGA-xvmv-369x-9889Open the advisoryAug 14, 2026
- UnknownMicrosoft Defender Patch Bypass: High Severity Zero-Day Privilege Escalation (CVE-2026-50656/RoguePlanet, ShieldBreak) - Arctic WolfCheck this weekEPSS 11.16%Aug 14, 2026
- Medium6.9SiYuan: authFilePublishAccess distinguishes hidden and forbidden documents from public and nonexistent ones, and issues a publish-auth cookie for documents it reports as forbiddenCheck if you run itEPSS 0.34%Aug 14, 2026
- Medium6.9SiYuan: The publish filter for database backlinks consults the forbidden list instead of the visibility list, disclosing hidden-tier documents to anonymous readersCheck if you run itEPSS 0.33%Aug 14, 2026
- UnknownImproper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.85%Aug 14, 2026
- UnknownBoldGrid w3_total_cache Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.43%Aug 14, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.45%Aug 14, 2026
- Unknown2014-07 Security Bulletin: Junos: Multiple privilege escalation vulnerabilities in Junos CLI (CVE-2014-3816) docphishai virustotal-url-stream automated-publicCheck if you run itEPSS 2.23%Aug 13, 2026
- UnknownLimit handshake messages we are willing to accept post-handshake in crypto/tlsCheck if you run itEPSS 0.57%Aug 13, 2026
- UnknownAvoid quadratic complexity in resolvePath in net/urlCheck if you run itEPSS 0.55%Aug 13, 2026
- UnknownAdd recursion depth guard during decode in encoding/xmlCheck if you run itEPSS 0.57%Aug 13, 2026
- UnknownFix Javascript regexp context tracking in html/templateCheck if you run itEPSS 0.31%Aug 13, 2026
- UnknownEnforce maximum recursion depth in encoding/asn1Check if you run itEPSS 0.57%Aug 13, 2026
- UnknownHCSEC-2026-28 - Vault Secrets Operator vulnerable to arbitrary file read via AppRole secretIDPathCheck if you run itEPSS 0.47%Aug 13, 2026
Sort