Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.4The WP YouTube Lyte plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'lyte' shortcode in all versions up to, and including, 1.7.29 du…Check if you run itEPSS 0.21%Apr 16, 2026
- High8.1Luanti 5 before 5.15.2 sometimes allows unintended access to an insecure environment.Check if you run itEPSS 0.17%Apr 16, 2026
- Critical9.3Luanti 5 before 5.15.2, when LuaJIT is used, allows a Lua sandbox escape via a crafted mod.Check if you run itEPSS 0.18%Apr 16, 2026
- High7.1OpenHarness prior to commit dd1d235 contains a path traversal vulnerability that allows remote gateway users with chat access to read arbitrary files by supplying path…Check if you run itEPSS 0.41%Apr 16, 2026
- High8.7OpenHarness prior to commit dd1d235 contains a command injection vulnerability that allows remote gateway users with chat access to invoke sensitive administrative com…Check if you run itEPSS 1.69%Apr 16, 2026
- Medium5.4Inadequate Encryption Strength vulnerability in TP-Link Archer C7 v5 and v5.8 (uhttpd modules) allows Password Recovery Exploitation.Check if you run itEPSS 0.09%Apr 16, 2026
- Critical9.8The Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale) plugin for WordPress is vulnerable to privilege escalation via ins…Check if you run itEPSS 0.50%Apr 16, 2026
- Low2.9Yubico libfido2 before 1.17.0, python-fido2 before 2.2.0, and yubikey-manager before 5.9.1 have an unintended DLL search path.Check if you run itEPSS 0.13%Apr 16, 2026
- High7.5Free5GC is an open-source Linux Foundation project for 5th generation (5G) mobile core networks.Check if you run itEPSS 0.51%Apr 16, 2026
- High8.2maddy is a composable, all-in-one mail server.Check if you run itEPSS 0.42%Apr 16, 2026
- Medium4.3The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to Missing…Check if you run itEPSS 0.32%Apr 15, 2026
- High8.8OWASP BLT is a QA testing and vulnerability disclosure platform that encompasses websites, apps, git repositories, and more.Check if you run itEPSS 0.41%Apr 15, 2026
- High8.7Pillow is a Python imaging library.Check if you run itEPSS 0.67%Apr 15, 2026
- Medium5.3Prometheus is an open-source monitoring system and time series database.Check if you run itEPSS 0.31%Apr 15, 2026
- Medium5.4Istio is an open platform to connect, manage, and secure microservices.Check if you run itEPSS 0.21%Apr 15, 2026
- Critical9.1A flaw was found in ArgoCD Image Updater.Check if you run itEPSS 0.36%Apr 15, 2026
- Medium4.8Pega Platform versions 8.1.0 through 25.1.1 are affected by a Stored Cross-Site Scripting vulnerability in a user interface component.Check if you run itEPSS 0.19%Apr 15, 2026
- Medium5.1Pega Platform versions 8.1.0 through 25.1.1 are affected by an HTML Injection vulnerability in a user interface component.Check if you run itEPSS 0.19%Apr 15, 2026
- High8.8Composer is a dependency manager for PHP.Check if you run itEPSS 1.69%Apr 15, 2026
- Medium6.1ApostropheCMS is an open-source Node.js content management system.Check if you run itEPSS 0.25%Apr 15, 2026
- High7.8Composer is a dependency manager for PHP.Check if you run itEPSS 1.04%Apr 15, 2026
- Critical9.4Dgraph is an open source distributed GraphQL database.Check if you run itEPSS 0.51%Apr 15, 2026
- High8.5Barracuda RMM versions prior to 2025.2.2 contain a privilege escalation vulnerability that allows local attackers to gain SYSTEM-level privileges by exploiting overly…Check if you run itEPSS 0.10%Apr 15, 2026
- Medium6.5A flaw was found in FFmpeg.Check if you run itEPSS 0.44%Apr 15, 2026
- High7.8A flaw was found in gimp.Check if you run itEPSS 0.26%Apr 15, 2026
Sort