Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3The All in One SEO plugin for WordPress is vulnerable to Sensitive Information Exposure via 'internalOptions' localized script data in versions up to, and including, 4…Check if you run itEPSS 0.29%May 20, 2026
- High7.5The Boost plugin for WordPress is vulnerable to time-based SQL Injection via the 'current_url' and 'user_name' parameters in versions up to, and including, 2.0.3 due t…Check if you run itEPSS 0.37%May 20, 2026
- High8.7E-LAN Hybrid Recording System developed by TONNET has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read…Check if you run itEPSS 0.54%May 20, 2026
- Critical9.8The Boost plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 2.0.3 via deserialization of untrusted input in the STYXKEY-BOOS…Check if you run itEPSS 0.57%May 20, 2026
- High7.4mailcow-dockerized contains a stored cross-site scripting vulnerability in the administrator Queue Manager.Check if you run itEPSS 0.32%May 20, 2026
- High7.5NVIDIA Triton Inference Server contains a vulnerability in the DALI backend, where an attacker could cause uncontrolled resource consumption.Check if you run itEPSS 0.41%May 20, 2026
- Critical9.8NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker could cause an integer overflow.Check if you run itEPSS 0.72%May 20, 2026
- Critical9.8NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker could cause an out-of-bounds read.Check if you run itEPSS 0.72%May 20, 2026
- High7.5NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an integer overflow.Check if you run itEPSS 0.60%May 20, 2026
- High7.5NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a path traversal issue.Check if you run itEPSS 0.65%May 20, 2026
- High7.5NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a path traversal issue.Check if you run itEPSS 4.90%May 20, 2026
- Critical9.8NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass.Check if you run itEPSS 2.55%May 20, 2026
- Critical9.8NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass.Check if you run itEPSS 0.58%May 20, 2026
- Critical9.8NVIDIA TRT-LLM for any platform contains a vulnerability in RPC testing, where an attacker could cause an unsafe deserialization.Check if you run itEPSS 0.59%May 20, 2026
- High7.5NVIDIA TRT-LLM for any platform contains a vulnerability where an attacker could cause an unchecked return value to a null pointer dereference.Check if you run itEPSS 0.47%May 20, 2026
- Critical9.8NVIDIA TRT-LLM for any platform contains a deserialization vulnerability and unsafe serialized handle.Check if you run itEPSS 0.38%May 20, 2026
- Critical9.8NVIDIA TRT-LLM for any platform contains a vulnerability in MPI server, where an attacker could cause an unsafe deserialization.Check if you run itEPSS 0.57%May 20, 2026
- Medium5.3The Xpro Addons — 140+ Widgets for Elementor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the get_conte…Check if you run itEPSS 0.25%May 20, 2026
- Medium6.5The Infility Global plugin for WordPress is vulnerable to SQL Injection via the 'orderby' and 'order' parameters in all versions up to, and including, 2.15.16.Check if you run itEPSS 0.36%May 20, 2026
- Medium6.1The Correct Prices plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the $_SERVER['PHP_SELF'] variable in versions up to and including 1.0.Check if you run itEPSS 0.22%May 20, 2026
- Medium6.1The SponsorMe plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via PHP_SELF Parameter in all versions up to, and including, 0.5.2 due to insufficie…Check if you run itEPSS 0.27%May 20, 2026
- Medium6.1The LJ comments import: reloaded plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via PHP_SELF Parameter in all versions up to, and including, 0.97…Check if you run itEPSS 0.27%May 20, 2026
- Medium4.3The TypeSquare Webfonts for ConoHa plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.0.4.Check if you run itEPSS 0.29%May 20, 2026
- Medium4.3The Remove Yellow BGBOX plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.Check if you run itEPSS 0.16%May 20, 2026
- Medium4.3The JaviBola Custom Theme Test plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.5.Check if you run itEPSS 0.18%May 20, 2026
Sort