Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7The LabOne Web Server, backing the LabOne User Interface, contains insufficient input validation in its file access functionality.Check if you run itEPSS 0.34%Apr 23, 2026
- Critical9.3Borg SPM 2007 (Sales Ended in 2008) developed by BorG Technology Corporation has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arb…Check if you run itEPSS 0.36%Apr 23, 2026
- Critical9.3Borg SPM 2007 (Sales Ended in 2008) developed by BorG Technology Corporation has a Authentication Bypass vulnerability, allowing unauthenticated remote attackers to lo…Check if you run itEPSS 0.45%Apr 23, 2026
- Critical9.3Borg SPM 2007 (Sales Ended in 2008) developed by BorG Technology Corporation has an Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to u…Check if you run itEPSS 0.50%Apr 23, 2026
- High7.2The ExactMetrics – Google Analytics Dashboard for WordPress (Website Stats Plugin) plugin for WordPress is vulnerable to unauthorized arbitrary plugin installation and…Check if you run itEPSS 0.69%Apr 23, 2026
- Critical9.8A critical remote code execution vulnerability exists in the unauthenticated REST API endpoint /99/ImportSQLTable in H2O-3 version 3.46.0.9 and prior.Check if you run itEPSS 0.94%Apr 23, 2026
- High7.1A Generation of Error Message Containing Sensitive Information vulnerability in the Materialized View Refresh mechanism in Google BigQuery on Google Cloud Platform all…Check if you run itEPSS 0.23%Apr 23, 2026
- High7.5CryptX versions before 0.088 for Perl do not reseed the Crypt::PK PRNG state after forking.Check if you run itEPSS 0.43%Apr 23, 2026
- Low3.5The reCaptcha by WebDesignBy WordPress plugin before 2.0 does not sanitize or escape the Site Key setting before outputting it in a JavaScript string context via the g…Check if you run itEPSS 0.20%Apr 23, 2026
- Medium5.3Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 0.74%Apr 23, 2026
- High8.7GROWI provided by GROWI, Inc.Check if you run itEPSS 0.36%Apr 23, 2026
- High7.0IP Setting Software contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries.Check if you run itEPSS 0.14%Apr 23, 2026
- Medium5.1EfficientLab Controlio before v1.3.95 contains a DLL hijacking vulnerability caused by weak folder permissions in the installation directory.Check if you run itEPSS 0.16%Apr 23, 2026
- Medium4.0Libgcrypt before 1.12.2 mishandles Dilithium signing.Check if you run itEPSS 0.23%Apr 23, 2026
- Medium6.7Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcry_pk_decrypt.Check if you run itEPSS 0.18%Apr 23, 2026
- Low2.5uuid before 14.0.0 can make unexpected writes when external output buffers are used, and the UUID version is 3, 5, or 6.Check if you run itEPSS 0.18%Apr 23, 2026
- Medium5.4Froxlor is open source server administration software.Check if you run itEPSS 0.26%Apr 23, 2026
- Medium5.0Froxlor is open source server administration software.Check if you run itEPSS 0.23%Apr 23, 2026
- Medium5.1CMS ALAYA provided by KANATA Limited contains an SQL injection vulnerability.Check if you run itEPSS 0.16%Apr 23, 2026
- High7.5Froxlor is open source server administration software.Check if you run itEPSS 0.41%Apr 23, 2026
- High8.5Froxlor is open source server administration software.Check if you run itEPSS 0.35%Apr 23, 2026
- Critical9.1Froxlor is open source server administration software.Check if you run itEPSS 0.48%Apr 23, 2026
- Critical9.9Froxlor is open source server administration software.Check if you run itEPSS 0.52%Apr 23, 2026
- Medium6.4The WP Store Locator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpsl_address' post meta value in versions up to, and including, 2.2.261…Check if you run itEPSS 0.16%Apr 23, 2026
- Medium5.4Successful exploitation of the stored cross-site scripting (XSS) vulnerability could allow an attacker to execute arbitrary JavaScript on any user account that has acc…Check if you run itEPSS 0.17%Apr 23, 2026
Sort