Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3IBM collaborative_lifecycle_management Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.65%Apr 21, 2026
- Medium4.7The wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to,…Check if you run itEPSS 0.27%Apr 20, 2026
- Medium5.3Dify is an open-source LLM app development platform.Check if you run itEPSS 0.19%Apr 20, 2026
- Medium5.3HKUDS OpenHarness prior to PR #159 remediation contains a session key derivation vulnerability that allows authenticated participants in shared chats or threads to hij…Check if you run itEPSS 0.20%Apr 20, 2026
- High7.1XiangShan (Open-source high-performance RISC-V processor) commit edb1dfaf7d290ae99724594507dc46c2c2125384 (2024-11-28) contains an improper exceptional-condition handl…Check if you run itEPSS 0.16%Apr 20, 2026
- Low2.3StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.13 and 12.0.0.6 are susceptible to a Information Disclosure vulnerability.Check if you run itEPSS 0.18%Apr 20, 2026
- Low2.3Potential read out of bounds case with wolfSSHd on Windows while handling a terminal resize request.Check if you run itEPSS 0.17%Apr 20, 2026
- High7.5Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte and multi-byte character encodi…Check if you run itEPSS 0.37%Apr 20, 2026
- Critical9.8Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to version 2.43 with a format width specifier with an expl…Check if you run itEPSS 0.50%Apr 20, 2026
- Medium6.4The Image Source Control Lite – Show Image Credits and Captions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Image Source' attachment fie…Check if you run itEPSS 0.15%Apr 20, 2026
- Medium5.5Nginx UI is a web user interface for the Nginx web server.Check if you run itEPSS 0.18%Apr 20, 2026
- High7.5LMDeploy is a toolkit for compressing, deploying, and serving large language models.Patch nowKEVEPSS 45.25%Apr 20, 2026
- High7.7Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers.Check if you run itEPSS 0.42%Apr 20, 2026
- Medium5.7Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers.Check if you run itEPSS 0.39%Apr 20, 2026
- High8.6Nginx UI is a web user interface for the Nginx web server.Check if you run itEPSS 0.27%Apr 20, 2026
- Critical9.9Spinnaker is an open source, multi-cloud continuous delivery platform.Check if you run itEPSS 0.55%Apr 20, 2026
- Critical9.9Spinnaker is an open source, multi-cloud continuous delivery platform.Check if you run itEPSS 0.62%Apr 20, 2026
- High8.8In OpenXiangShan NEMU, when Smstateen is enabled, clearing mstateen0.ENVCFG does not correctly restrict access to henvcfg and senvcfg.Check if you run itEPSS 0.32%Apr 20, 2026
- Medium6.5In OpenXiangShan NEMU, insufficient Smstateen permission enforcement allows lower-privileged code to access IMSIC state via stopei/vstopei CSRs even when mstateen0.IMS…Check if you run itEPSS 0.23%Apr 20, 2026
- Critical9.8In OpenXiangShan NEMU prior to 55295c4, when running with RVH (Hypervisor extension) enabled, a VS-mode guest write to the supervisor interrupt-enable CSR (sie) may be…Check if you run itEPSS 0.36%Apr 20, 2026
- High7.8A local attacker who can execute privileged CSR operations (or can induce firmware to do so) performs carefully crafted reads/writes to menvcfg (e.g., csrrs in M-mode).Check if you run itEPSS 0.11%Apr 20, 2026
- Medium5.7Cryptographic algorithm downgrade in the caching layer of Amazon AWS Encryption SDK for Python before version 3.3.1 and before version 4.0.5 might allow an authenticat…Check if you run itEPSS 0.10%Apr 20, 2026
- Critical9.2Vvveb CMS before 1.0.8.2 contains a remote code execution vulnerability in its media management functionality where a missing return statement in the file rename handl…Check if you run itEPSS 0.63%Apr 20, 2026
- High8.7Vvveb CMS 1.0.8.2 contains a remote code execution vulnerability in its media upload handler that allows authenticated attackers to execute arbitrary operating system…Check if you run itEPSS 0.62%Apr 20, 2026
- High8.1The Everest Forms plugin for WordPress is vulnerable to Arbitrary File Read and Deletion in all versions up to, and including, 3.4.4.Check if you run itEPSS 1.02%Apr 20, 2026
Sort