Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1Rsync version 3.4.2 and prior contain an integer overflow vulnerability in the compressed-token decoder where a 32-bit signed counter is not checked for overflow, allo…Check if you run itEPSS 0.78%May 20, 2026
- Medium6.3Rsync version 3.4.2 and prior contain an authorization bypass vulnerability in the rsync daemon's hostname-based access control list enforcement when configured with chroot.Check if you run itEPSS 0.28%May 20, 2026
- High7.5The Creative Mail – Easier WordPress & WooCommerce Email Marketing plugin for WordPress is vulnerable to SQL Injection via the 'checkout_uuid' parameter in all version…Check if you run itEPSS 0.40%May 20, 2026
- Medium6.8Microsoft is aware of a security feature bypass vulnerability in Windows publicly referred to as "YellowKey".Check if you run itEPSS 1.89%May 20, 2026
- Medium5.5Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases.Check if you run itEPSS 0.18%May 20, 2026
- Medium6.8Trilium Notes is an open-source, cross-platform hierarchical note taking application for building large personal knowledge bases.Check if you run itEPSS 0.62%May 20, 2026
- Medium5.3Mantis Bug Tracker (MantisBT) is an open source issue tracker.Check if you run itEPSS 0.37%May 20, 2026
- Medium4.3Mantis Bug Tracker (MantisBT) is an open source issue tracker.Check if you run itEPSS 0.25%May 20, 2026
- Critical10.0Unrestricted Upload of File with Dangerous Type vulnerability in WP Swings Gift Cards For WooCommerce Pro allows Using Malicious Files.Patch nowKEVEPSS 0.28%May 20, 2026
- Critical9.8Missing Authorization vulnerability in Drupal Date iCal allows Forceful Browsing.Check if you run itEPSS 0.37%May 19, 2026
- Medium5.4Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Colorbox Inline allows Cross-Site Scripting (XSS).Check if you run itEPSS 0.18%May 19, 2026
- Low2.7Modification of Assumed-Immutable Data (MAID) vulnerability in Drupal Translate Drupal with GTranslate allows Resource Location Spoofing.Check if you run itEPSS 0.24%May 19, 2026
- Low3.7Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Node View Permissions allows Forceful Browsing.Check if you run itEPSS 0.21%May 19, 2026
- Medium6.1Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Obfuscate allows Cross-Site Scripting (XSS).Check if you run itEPSS 0.20%May 19, 2026
- Medium6.1Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Orejime allows Cross-Site Scripting (XSS).Check if you run itEPSS 0.20%May 19, 2026
- Medium5.3Mantis Bug Tracker (MantisBT) is an open source issue tracker.Check if you run itEPSS 0.36%May 19, 2026
- Medium5.7Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks.Check if you run itEPSS 0.27%May 19, 2026
- Medium5.3Mantis Bug Tracker (MantisBT) is an open source issue tracker.Check if you run itEPSS 0.36%May 19, 2026
- Medium6.1Template::Plugin::HTML versions before 3.103 for Perl allows HTML and JavaScript to be injected.Check if you run itEPSS 0.29%May 19, 2026
- High8.6Mantis Bug Tracker (MantisBT) is an open source issue tracker.Check if you run itEPSS 0.44%May 19, 2026
- Medium5.1Mantis Bug Tracker (MantisBT) is an open source issue tracker.Check if you run itEPSS 0.43%May 19, 2026
- High8.1CtrlPanel is open-source billing software for hosting providers.Check if you run itEPSS 0.30%May 19, 2026
- Medium4.8CtrlPanel is open-source billing software for hosting providers.Check if you run itEPSS 0.22%May 19, 2026
- High8.7CtrlPanel is open-source billing software for hosting providers.Check if you run itEPSS 0.35%May 19, 2026
- Medium5.1Ledger Nano X, Flex, and Stax devices contain a denial of service vulnerability in the MCU firmware update process due to missing validation of the reset_handler param…Check if you run itEPSS 0.21%May 19, 2026
Sort