Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.9Valtimo is an open-source business process automation platform.Check if you run itEPSS 0.48%Apr 16, 2026
- Medium5.9A missing lock verification in AMD Secure Processor (ASP) firmware may permit a locally authenticated attacker with administrative privileges to alter MMIO routing on…Check if you run itEPSS 0.11%Apr 16, 2026
- High8.7A privilege escalation vulnerability in Microchip IStaX allows an authenticated low-privileged user to recover a shared per-device cookie secret from their own webstax…Check if you run itEPSS 0.23%Apr 16, 2026
- High8.8The Career Section plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to Path Traversal and Arbitrary File Deletion in all versions up to, and including, 1.6.Check if you run itEPSS 0.41%Apr 16, 2026
- Medium4.4The OPEN-BRAIN plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'API Key' settings field in all versions up to, and including, 0.5.0.Check if you run itEPSS 0.39%Apr 16, 2026
- High8.8The Livemesh Addons for Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 9.0.Check if you run itEPSS 0.82%Apr 16, 2026
- Medium6.4The Livemesh Addons for Elementor plugin for WordPress is vulnerable to unauthorized modification of data and Stored Cross-Site Scripting via plugin settings in all ve…Check if you run itEPSS 0.32%Apr 16, 2026
- High8.8The AcyMailing plugin for WordPress is vulnerable to privilege escalation in all versions From 9.11.0 up to, and including, 10.8.1 due to a missing capability check on…Check if you run itEPSS 0.58%Apr 16, 2026
- Critical9.8The Riaxe Product Customizer plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.1.2.Check if you run itEPSS 0.84%Apr 16, 2026
- Medium5.3The Riaxe Product Customizer plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.1.2.Check if you run itEPSS 0.57%Apr 16, 2026
- Medium4.4The Custom New User Notification plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's admin settings in all versions up to, and including, 1.2.0.Check if you run itEPSS 0.41%Apr 16, 2026
- High7.2Due to improper input validation in one of the Eaton Intelligent Power Protector (IPP) XML, it is possible for an attacker with admin privileges and access to the loca…Check if you run itEPSS 0.34%Apr 16, 2026
- Medium5.4A Download of Code Without Integrity Check vulnerability in the update modules in ASUS Member Center(华硕大厅) allows a local user to achieve privilege escalation to Admin…Check if you run itEPSS 0.07%Apr 16, 2026
- High8.7OpenHarness prior to commit dd1d235 contains a command injection vulnerability that allows remote gateway users with chat access to invoke sensitive administrative com…Check if you run itEPSS 2.12%Apr 16, 2026
- Medium5.4Inadequate Encryption Strength vulnerability in TP-Link Archer C7 v5 and v5.8 (uhttpd modules) allows Password Recovery Exploitation.Check if you run itEPSS 0.11%Apr 16, 2026
- Critical9.8The Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale) plugin for WordPress is vulnerable to privilege escalation via ins…Check if you run itEPSS 0.78%Apr 16, 2026
- Medium5.3Prometheus is an open-source monitoring system and time series database.Check if you run itEPSS 0.26%Apr 15, 2026
- Critical9.4Dgraph is an open source distributed GraphQL database.Check if you run itEPSS 0.60%Apr 15, 2026
- Medium5.4ApostropheCMS is an open-source Node.js content management system.Check if you run itEPSS 0.26%Apr 15, 2026
- Medium5.3ApostropheCMS is an open-source Node.js content management system.Check if you run itEPSS 0.52%Apr 15, 2026
- Medium5.0Weblate is a web based localization tool.Check if you run itEPSS 0.33%Apr 15, 2026
- Critical9.9A vulnerability in Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system…Check if you run itEPSS 5.60%Apr 15, 2026
- Critical9.9A vulnerability in Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system…Check if you run itEPSS 6.02%Apr 15, 2026
- Medium4.9ZDI-26-582: Cisco Identity Services Engine PatchUpdateListener Directory Traversal Information Disclosure VulnerabilityCheck if you run itEPSS 6.54%Apr 15, 2026
- Critical9.9ZDI-26-581: Cisco Identity Services Engine invokeScript Command Injection Remote Code Execution VulnerabilityCheck this weekEPSS 10.38%Apr 15, 2026