Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.6Vault’s PKI engine’s ACME validation did not reject local targets when issuing http-01 and tls-alpn-01 challenges.Check if you run itEPSS 0.34%Apr 17, 2026
- Medium6.5The wpForo Forum plugin for WordPress is vulnerable to unauthorized modification of data due to the use of on user-controlled input in the method of in all versions up…Check if you run itEPSS 0.33%Apr 17, 2026
- High8.8If a Vault auth mount is configured to pass through the "Authorization" header, and the "Authorization" header is used to authenticate to Vault, Vault forwarded the Va…Check if you run itEPSS 0.41%Apr 17, 2026
- High8.1An authenticated user with access to a kvv2 path through a policy containing a glob may be able to delete secrets they were not authorized to read or write, resulting…Check if you run itEPSS 0.38%Apr 17, 2026
- High7.5HCSEC-2026-08 - Vault Vulnerable to Denial-of-Service via Unauthenticated Root Token Generation/Rekey OperationsCheck if you run itEPSS 0.72%Apr 17, 2026
- Medium6.4The Royal Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Instagram Feed widget's 'instagram_follow_text' setting in all…Check if you run itEPSS 0.35%Apr 17, 2026
- Medium6.5The MasterStudy LMS WordPress Plugin for Online Courses and Education plugin for WordPress is vulnerable to Time-based Blind SQL Injection via the 'order' and 'orderby…Check if you run itEPSS 0.46%Apr 17, 2026
- Medium6.5The WP Statistics plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 14.16.4.Check if you run itEPSS 0.31%Apr 17, 2026
- Medium5.3SiYuan is an open-source personal knowledge management system.Check if you run itEPSS 0.26%Apr 17, 2026
- Medium5.9Note Mark is an open-source note-taking application.Check if you run itEPSS 0.44%Apr 17, 2026
- Low3.7Note Mark is an open-source note-taking application.Check if you run itEPSS 0.26%Apr 17, 2026
- High8.7Note Mark is an open-source note-taking application.Check if you run itEPSS 0.31%Apr 17, 2026
- Medium6.9pypdf is a free and open-source pure-python PDF library.Check if you run itEPSS 0.42%Apr 17, 2026
- High8.6Cloud Foundry UUA is vulnerable to a bypass that allows an attacker to obtain a token for any user and gain access to UAA-protected systems.Check if you run itEPSS 0.36%Apr 17, 2026
- High7.2The WP Statistics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'utm_source' parameter in all versions up to, and including, 14.16.4.Patch nowKEVEPSS 0.48%Apr 17, 2026
- Critical9.0SiYuan is an open-source personal knowledge management system.Check if you run itEPSS 0.31%Apr 16, 2026
- High8.5SiYuan is an open-source personal knowledge management system.Check if you run itEPSS 0.29%Apr 16, 2026
- High8.1SiYuan is an open-source personal knowledge management system.Check if you run itEPSS 0.40%Apr 16, 2026
- Medium6.1AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework.Check if you run itEPSS 0.25%Apr 16, 2026
- Medium6.1openCryptoki is a PKCS#11 library and provides tooling for Linux and AIX.Check if you run itEPSS 0.16%Apr 16, 2026
- Medium4.3Vision Helpdesk before 5.7.0 (patched in 5.6.10) allows attackers to read user profiles via modified serialized cookie data to vis_client_id.Check if you run itEPSS 0.17%Apr 16, 2026
- High8.1sagredo qmail before 2026.04.07 allows tls_quit remote code execution because of popen in notlshosts_auto in qmail-remote.c.Check if you run itEPSS 0.85%Apr 16, 2026
- High8.8My Calendar is a WordPress plugin for managing calendar events.Check if you run itEPSS 0.93%Apr 16, 2026
- Medium6.9free5GC is an open-source implementation of the 5G core network.Check if you run itEPSS 0.32%Apr 16, 2026
- High8.7free5GC is an open-source implementation of the 5G core network.Check if you run itEPSS 0.43%Apr 16, 2026
Sort