Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aman Ninja Forms Views – Display & Edit Ninja Forms Submiss…Check if you run itEPSS 0.22%May 12, 2026
- High8.2A malicious user could craft input that is stored in conversation memory and later interpreted by the model in an unintended way.Check if you run itEPSS 0.22%May 12, 2026
- High7.5Spring AI's chat memory component contained a problematic default that, when not explicitly overridden, could result in unintended data exposure between users.Check if you run itEPSS 0.26%May 12, 2026
- Low2.9The application does not impose strict enough restrictions on directory access permissions, posing a risk that other malicious applications could obtain sensitive information.Check if you run itEPSS 0.09%May 12, 2026
- High8.8Incorrect Authorization vulnerability in E-Kalite Software Hardware Engineering Design and Internet Services Industry and Trade Ltd.Check if you run itEPSS 0.23%May 12, 2026
- High7.5multiparty@4.2.3 and lower versions are vulnerable to denial of service via uncaught exception.Check if you run itEPSS 0.33%May 12, 2026
- High7.5multiparty@4.2.3 and lower versions are vulnerable to denial of service via uncaught exception.Check if you run itEPSS 0.47%May 12, 2026
- High7.5multiparty@4.2.3 and lower versions are vulnerable to denial of service via regular expression backtracking in the Content-Disposition filename parameter parser.Check if you run itEPSS 0.34%May 12, 2026
- Critical9.2Insecure generation of credentials in the local SAT (Technical Support) access functionality of the Ingecon Sun EMS Board.Check if you run itEPSS 0.15%May 12, 2026
- Critical9.2Prior to 2025-11-03, well-intended users of Terraform or REST API for Google Cloud AlloyDB for PostgreSQL could have created clusters with an insecure default password…Check if you run itEPSS 0.24%May 12, 2026
- Medium4.4The Continually plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 4.3.1 due to insufficient in…Check if you run itEPSS 0.19%May 12, 2026
- Medium4.4The FastBots plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.0.12 due to insufficient inpu…Check if you run itEPSS 0.19%May 12, 2026
- High8.8Authorization bypass through User-Controlled key vulnerability in ABIS Technology Ltd.Check if you run itEPSS 0.24%May 12, 2026
- High8.7A remote code execution vulnerability exists in Code Runner MCP Server when run with the --transport http option, which exposes the /mcp JSON-RPC endpoint without auth…Check if you run itEPSS 0.29%May 12, 2026
- High7.3A vulnerability has been identified in Solid Edge SE2026 (All versions < V226.0 Update 5).Check if you run itEPSS 0.11%May 12, 2026
- High7.3A vulnerability has been identified in Solid Edge SE2026 (All versions < V226.0 Update 5).Check if you run itEPSS 0.10%May 12, 2026
- Critical9.3A vulnerability has been identified in ROS# (All versions < V2.2.2).Check if you run itEPSS 0.49%May 12, 2026
- Medium5.9A vulnerability has been identified in blueplanet 100 NX3 M8 (All versions), blueplanet 100 TL3 GEN2 (All versions), blueplanet 105 TL3 (All versions < V3.92), bluepla…Check if you run itEPSS 0.15%May 12, 2026
- High8.7A vulnerability has been identified in Teamcenter V2312 (All versions < V2312.0014), Teamcenter V2406 (All versions < V2406.0012), Teamcenter V2412 (All versions < V24…Check if you run itEPSS 0.29%May 12, 2026
- High8.5A vulnerability has been identified in Teamcenter V2312 (All versions < V2312.0014), Teamcenter V2406 (All versions < V2406.0012), Teamcenter V2412 (All versions < V24…Check if you run itEPSS 0.19%May 12, 2026
- High7.0Affected devices do not properly restrict access to the web browser via the Control Panel when no corresponding security mechanisms are in place.Check if you run itEPSS 0.11%May 12, 2026
- High7.2Affected devices do not properly validate and sanitize filenames on the Firmware Update page.Check if you run itEPSS 0.27%May 12, 2026
- Critical9.3Affected devices do not properly validate and sanitize Technology Object (TO) name rendered on the "Motion Control Diagnostics" page of the web interface.Check if you run itEPSS 0.37%May 12, 2026
- Critical9.3Affected devices do not properly validate and sanitize PLC/station name rendered on the "communication" parameters page of the web interface.Check if you run itEPSS 0.37%May 12, 2026
- High8.7A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0).Check if you run itEPSS 0.32%May 12, 2026
Sort