Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache PDFBox Examples.Check if you run itEPSS 0.71%Apr 14, 2026
- Medium5.1A vulnerability has been identified in Industrial Edge Management Pro V1 (All versions >= V1.7.6 = V2.0.0 = V2.2.0 < V2.8.0).Check if you run itEPSS 0.21%Apr 14, 2026
- Medium5.3Cleartext Transmission of Sensitive Information vulnerability in Apache APISIX.Check if you run itEPSS 0.24%Apr 14, 2026
- High7.5Cleartext Transmission of Sensitive Information vulnerability in Apache APISIX.Check if you run itEPSS 0.25%Apr 14, 2026
- Critical9.1Header injection vulnerability in Apache APISIX.Check if you run itEPSS 0.52%Apr 14, 2026
- High8.7A vulnerability has been identified in RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P) (All versions < V5.8).Check if you run itEPSS 0.26%Apr 14, 2026
- High8.7A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3).Check if you run itEPSS 0.45%Apr 14, 2026
- Medium6.9A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3 with UMC).Check if you run itEPSS 0.25%Apr 14, 2026
- Medium6.3A vulnerability has been identified in Siemens Software Center (All versions < V3.5.8.2), Simcenter 3D (All versions < V2506.6000), Simcenter Femap (All versions < V25…Check if you run itEPSS 0.14%Apr 14, 2026
- Medium6.5The The Germanized for WooCommerce plugin for WordPress is vulnerable to arbitrary shortcode execution via 'account_holder' parameter in all versions up to, and including, 3.20.5.Check if you run itEPSS 0.42%Apr 14, 2026
- High7.2The Smart Post Show – Post Grid, Post Carousel & Slider, and List Category Posts plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and…Check if you run itEPSS 0.53%Apr 14, 2026
- Medium4.4The WholeSale Products Dynamic Pricing Management WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up t…Check if you run itEPSS 0.16%Apr 14, 2026
- Medium6.4The ShopLentor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the woolentor_quickview_button shortcode's button_text attribute in all versions u…Check if you run itEPSS 0.30%Apr 14, 2026
- High7.2PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.30%Apr 14, 2026
- Critical9.1PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.30%Apr 14, 2026
- Critical9.1PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.42%Apr 14, 2026
- Critical9.8PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.61%Apr 14, 2026
- High8.4PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.25%Apr 14, 2026
- Medium6.4The Surbma | Booking.com Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode in all versions up to, and including, 2…Check if you run itEPSS 0.15%Apr 14, 2026
- Critical9.8A critical vulnerability in the Talend JobServer and Talend Runtime allows unauthenticated remote code execution via the JMX monitoring port.Check if you run itEPSS 0.74%Apr 14, 2026
- High7.2The BackWPup plugin for WordPress is vulnerable to Local File Inclusion via the parameter of the REST endpoint in all versions up to, and including, 5.6.6 due to a non…Check if you run itEPSS 1.31%Apr 14, 2026
- High7.2The Form Maker by 10Web plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Matrix field (Text Box input type) in form submissions in all version…Check if you run itEPSS 0.24%Apr 14, 2026
- High7.1External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets.Check if you run itEPSS 0.26%Apr 14, 2026
- Critical9.1The LearnPress plugin for WordPress is vulnerable to unauthorized data deletion due to a missing capability check on the function in all versions up to, and including,…Check if you run itEPSS 0.87%Apr 14, 2026
- High7.5The JetEngine plugin for WordPress is vulnerable to SQL Injection via the Custom Content Type (CCT) REST API search endpoint in all versions up to, and including, 3.8.6.1.Check if you run itEPSS 0.37%Apr 14, 2026
Sort