Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.6Valtimo is an open-source business process automation platform.Check if you run itEPSS 0.34%May 14, 2026
- Low2.3Nextcloud News is an RSS/Atom feed reader.Check if you run itEPSS 0.29%May 14, 2026
- High8.6A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an unauthenticated, remote attacker to read arbitrary files that a…Check if you run itEPSS 1.09%May 14, 2026
- Medium5.9Gotenberg is a Docker-powered stateless API for PDF files.Check if you run itEPSS 0.36%May 14, 2026
- Critical9.4Gotenberg is a Docker-powered stateless API for PDF files.Patch nowKEVEPSS 1.77%May 14, 2026
- High7.5Gotenberg is a Docker-powered stateless API for PDF files.Check if you run itEPSS 0.38%May 14, 2026
- Medium5.3Gotenberg is a Docker-powered stateless API for PDF files.Check if you run itEPSS 0.25%May 14, 2026
- Critical9.8Gotenberg is a Docker-powered stateless API for PDF files.Patch nowKEVEPSS 3.67%May 14, 2026
- Critical9.2MagicMirror² is an open source modular smart mirror platform.Check if you run itEPSS 1.68%May 14, 2026
- Medium6.3Spring Cloud AWS simplifies using AWS managed services in a Spring and Spring Boot applications.Check if you run itEPSS 0.27%May 14, 2026
- High8.8RMCP is an official Rust SDK for the Model Context Protocol.Check if you run itEPSS 0.24%May 14, 2026
- High8.6Vvveb before 1.0.8.3 contains an unrestricted file upload vulnerability in the plugin upload endpoint that allows super_admin users to execute arbitrary PHP code by up…Check if you run itEPSS 0.63%May 14, 2026
- High7.1Vvveb before 1.0.8.3 contains an uncontrolled recursion vulnerability in the admin controller dispatch cycle where Base::init() repeatedly invokes permission() on erro…Check if you run itEPSS 0.48%May 14, 2026
- High7.1Unsafe object reference (IDOR) in Stel Order v3.25.1 and earlier versions, specifically in the ‘/app/FrontController’ endpoint, through manipulation of the ‘employeeID’ parameter.Check if you run itEPSS 0.35%May 14, 2026
- High7.5The Database Backup for WordPress plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.5.2.Check if you run itEPSS 0.57%May 14, 2026
- Medium5.1podinfo through 6.11.2 contains a reflected cross-site scripting vulnerability in the /echo and /api/echo endpoints where the echoHandler writes request body content d…Check if you run itEPSS 0.34%May 14, 2026
- High8.2Allocation of Resources Without Limits or Throttling vulnerability in plug_project plug allows denial of service via unbounded buffer accumulation in multipart header parsing.Check if you run itEPSS 0.85%May 14, 2026
- High7.5The InfusedWoo Pro plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 5.1.2 via the popup_submit.Check if you run itEPSS 0.46%May 14, 2026
- Medium5.3The User Registration & Membership plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 5.1.5.Check if you run itEPSS 0.43%May 14, 2026
- Medium4.3The LatePoint plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 5.3.2.Check if you run itEPSS 0.15%May 14, 2026
- High7.2The ManageWP Worker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'MWP-Key-Name' HTTP request header in all versions up to, and including, 4.9.31.Check if you run itEPSS 0.32%May 14, 2026
- Low3.5GitLab has remediated an issue in GitLab EE affecting all versions from 18.8 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an a…Check if you run itEPSS 0.26%May 14, 2026
- Medium4.3GitLab has remediated an issue in GitLab EE affecting all versions from 15.7 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an a…Check if you run itEPSS 0.27%May 14, 2026
- Medium4.3GitLab has remediated an issue in GitLab EE affecting all versions from 11.10 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that under certain conditio…Check if you run itEPSS 0.39%May 14, 2026
- Medium5.4The WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect, Security & SSL Scan plugin for WordPress is vulnerable to unauthorized modification of data…Check if you run itEPSS 0.24%May 14, 2026