Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1An authorization bypass vulnerability exists in the Mautic 7 API v2 endpoints (utilizing API Platform).Check if you run itEPSS 0.34%May 29, 2026
- Critical10.0Web endpoints intended for the Acer Connect app improperly validate the HTTP Authorization header, failing to block requests when Base64 decoding fails.Check if you run itEPSS 0.53%May 29, 2026
- High7.5CryptX versions before 0.088_001 for Perl have a stack buffer overflow in four AEAD decrypt_verify helpers.Check if you run itEPSS 0.80%May 28, 2026
- High7.3Plack::Middleware::Security::Common versions before 0.13.1 for Perl did not block header injections in request paths.Check if you run itEPSS 0.34%May 28, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix empty payload in tap skb for non-linear buffers For non-linear skbs, virtio_trans…Check if you run itEPSS 0.16%May 28, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: octeon_ep_vf: add NULL check for napi_build_skb() napi_build_skb() can return NULL on allocation failure.Check if you run itEPSS 0.16%May 28, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache Make sure resources…Check if you run itEPSS 0.18%May 28, 2026
- High8.1In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_event: Fix OOB read and infinite loop in hci_le_create_big_complete_evt hci_le_creat…Check if you run itEPSS 0.40%May 28, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: usb: ulpi: fix memory leak on ulpi_register() error paths Commit 01af542392b5 ("usb: ulpi: fix doub…Check if you run itEPSS 0.16%May 28, 2026
- Medium4.3The Equalize Digital Accessibility Checker – WCAG, ADA, EAA and Section 508 compliance plugin for WordPress is vulnerable to authorization bypass in all versions up to…Check if you run itEPSS 0.47%May 28, 2026
- Medium5.3The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and i…Check if you run itEPSS 0.64%May 28, 2026
- Medium4.3The 3D Viewer – 3D Model Viewer – Augmented Reality – Virtual Try On plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.0.1.Check if you run itEPSS 0.40%May 28, 2026
- High8.6The Eupago Gateway For Woocommerce WordPress plugin before 4.7.2 does not properly restrict access to its refund request handler, allowing unauthenticated attackers to…Check if you run itEPSS 0.38%May 28, 2026
- Medium4.3The SMTP2GO for WordPress – Email Made Easy plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 1.16.0.Check if you run itEPSS 0.43%May 28, 2026
- Medium5.3The Geo Mashup plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.13.19.Check if you run itEPSS 0.58%May 28, 2026
- High7.0A command injection vulnerability was discovered in the utility of RPM.Check if you run itEPSS 0.92%May 28, 2026
- High8.8The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.29.2.Check if you run itEPSS 0.75%May 28, 2026
- High7.5Jenkins Credentials Binding Plugin 720.v3f6decef43ea_ and earlier does not properly sanitize file names for file and zip file credentials, allowing attackers able to p…Check if you run itEPSS 0.58%May 27, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: gfs2: fix memory leaks in gfs2_fill_super error path Fix two memory leaks in the gfs2_fill_super()…Check if you run itEPSS 0.16%May 27, 2026
- Medium4.8Crypt::ScryptKDF versions through 0.010 for Perl uses insecure random number source when no CSPRNG module is available.Check if you run itEPSS 0.32%May 26, 2026
- Medium5.3Mojolicious::Plugin::Statsd versions through 0.04 for Perl allowed metric injections.Check if you run itEPSS 0.40%May 26, 2026
- High7.1Missing Authorization vulnerability in AA-Team Woocommerce Envato Affiliates allows Accessing Functionality Not Properly Constrained by ACLs.Check if you run itEPSS 0.25%May 26, 2026
- High7.2IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0 could allow an attacker with administrative privileges to execute remote code due to exposed method that i…Check if you run itEPSS 0.50%May 26, 2026
- High7.6MikroORM is a TypeScript ORM for Node.js based on Data Mapper, Unit of Work and Identity Map patterns.Check if you run itEPSS 1.29%May 26, 2026
- Medium6.9Improperly validated order clauses lead to a SQL injection vulnerability in com_tags.Check if you run itEPSS 0.45%May 26, 2026