Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7An improper input validation, together with an overly permissive default CORS configuration in Open Notebook v1.8.1 allows remote attacker to trick a legitimate user t…Check if you run itEPSS 0.14%May 7, 2026
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in PluginUs.Net BEAR allows Cross Site Request Forgery.Check if you run itEPSS 0.10%May 7, 2026
- Medium6.9Vulnerability on the external sharing feature in Cryptobox allows an attacker knowing a sharing link URL to retrieve information from the server allowing an offline br…Check if you run itEPSS 0.23%May 7, 2026
- High7.5A remote denial-of-service vulnerability exists in the ZTE Cloud PC client uSmartview, which may lead to memory corruption and remote denial of service.Check if you run itEPSS 0.27%May 7, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WProyal Royal Elementor Addons allows Stored XSS.Check if you run itEPSS 0.18%May 7, 2026
- Medium5.3Missing Authorization vulnerability in bPlugins PDF Poster allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.18%May 7, 2026
- Medium5.3Authorization Bypass Through User-Controlled Key vulnerability in YITH YITH WooCommerce Wishlist allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.32%May 7, 2026
- Medium5.3Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in weDevs Happy Addons for Elementor allows Retrieve Embedded Sensitive Data.Check if you run itEPSS 0.34%May 7, 2026
- Medium5.3Missing Authorization vulnerability in WProyal Royal Elementor Addons allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.24%May 7, 2026
- Medium5.4Cross-Site Request Forgery (CSRF) vulnerability in WPGraphQL allows Cross Site Request Forgery.Check if you run itEPSS 0.09%May 7, 2026
- High7.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPMart Team Member allows Blind SQL Injection.Check if you run itEPSS 0.23%May 7, 2026
- Medium5.3Missing Authorization vulnerability in Magepeople inc.Check if you run itEPSS 0.17%May 7, 2026
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WEN Themes WEN Logo Slider allows DOM-Based XSS.Check if you run itEPSS 0.14%May 7, 2026
- Medium5.3Improper restriction of excessive authentication attempts vulnerability in Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900,…Check if you run itEPSS 0.30%May 7, 2026
- Critical9.8Remote Code Execution Vulnerability in Hitachi Storage Navigator and the maintenance console in Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F3…Check if you run itEPSS 0.55%May 7, 2026
- High8.0A low privileged remote attacker can gain the root password due to improper removal of sensitive information before storage or transfer.Check if you run itEPSS 0.34%May 7, 2026
- Medium5.4Out-of-bounds write vulnerability in The Document Foundation LibreOffice via crafted OOXML documents with mismatched encryption salt parameters.Check if you run itEPSS 0.08%May 7, 2026
- High7.8ZTE Cloud PC client uSmartView contains a DLL hijacking vulnerability; since uSmartViewServiceAgent.exe runs with SYSTEM privileges, successful hijacking enables local…Check if you run itEPSS 0.16%May 7, 2026
- Critical9.8OS command injection vulneravility in the management gui (maintenance utility) of Hitachi Virtual Storage Platform One Block 23, 24, 26 and 28.Check if you run itEPSS 0.90%May 7, 2026
- High7.1An authenticated user can crash mongod when running $rankFusion or $scoreFusion with an empty pipeline on a view.Check if you run itEPSS 0.23%May 7, 2026
- High8.1The WP-Optimize – Cache, Compress images, Minify & Clean database to boost page speed & performance plugin for WordPress is vulnerable to arbitrary file deletion due t…Check if you run itEPSS 0.95%May 7, 2026
- High7.5The BetterDocs Pro plugin for WordPress is vulnerable to SQL Injection via the and AJAX actions in all versions up to, and including, 3.7.0.Check if you run itEPSS 0.40%May 7, 2026
- High7.2NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions.Check if you run itEPSS 1.83%May 7, 2026
- Critical9.3Hyperledger Fabric is an enterprise-grade permissioned distributed ledger framework for developing solutions and applications.Check if you run itEPSS 0.53%May 7, 2026
- High7.7Istio is an open platform to connect, manage, and secure microservices.Check if you run itEPSS 0.33%May 7, 2026
Sort