Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to an Insecure Direct Object Reference in all versions up to, and including, 3.9.7.Check if you run itEPSS 0.61%Apr 10, 2026
- Medium5.4The WP-Optimize plugin for WordPress is vulnerable to unauthorized access of functionality due to missing capability checks in the function in in all versions up to, a…Check if you run itEPSS 0.43%Apr 10, 2026
- High7.8Samsung MagicINFO 9 Server Incorrect Default Permissions Local Privilege Escalation Vulnerability This issue affects MagicINFO 9 Server: less than 21.1091.1.Check if you run itEPSS 0.18%Apr 10, 2026
- Medium4.3The Aruba HiSpeed Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.0.4.Check if you run itEPSS 0.18%Apr 10, 2026
- Medium6.4The Webling plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 3.9.0 due to insufficient input sanitization, insuf…Check if you run itEPSS 0.28%Apr 10, 2026
- High8.9A weakness has been identified in Totolink A7100RU 7.4cu.2313_b20191024.Check if you run itEPSS 1.82%Apr 10, 2026
- High8.9A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024.Check if you run itEPSS 1.80%Apr 10, 2026
- High8.9A vulnerability was identified in Totolink A7100RU 7.4cu.2313_b20191024.Check if you run itEPSS 1.80%Apr 10, 2026
- High7.4A vulnerability was determined in Tenda F451 1.0.0.7.Check if you run itEPSS 0.51%Apr 10, 2026
- High7.4A vulnerability was found in Tenda F451 1.0.0.7.Check if you run itEPSS 0.51%Apr 10, 2026
- High7.4A vulnerability has been found in Tenda F451 1.0.0.7.Check if you run itEPSS 0.51%Apr 10, 2026
- High7.4A flaw has been found in Tenda F451 1.0.0.7.Check if you run itEPSS 0.51%Apr 10, 2026
- Medium6.3A heap use-after-free exists in wolfSSL's TLS 1.3 post-quantum cryptography (PQC) hybrid KeyShare processing.Check if you run itEPSS 0.21%Apr 10, 2026
- Low2.3X.509 date buffer overflow in wolfSSL_X509_notAfter / wolfSSL_X509_notBefore.Check if you run itEPSS 0.30%Apr 10, 2026
- Medium6.3Dual-Algorithm CertificateVerify out-of-bounds read.Check if you run itEPSS 0.19%Apr 10, 2026
- Low2.3Heap out-of-bounds read in PKCS7 parsing.Check if you run itEPSS 0.16%Apr 10, 2026
- High7.4A vulnerability was detected in Tenda F451 1.0.0.7.Check if you run itEPSS 0.51%Apr 9, 2026
- Low2.0A security vulnerability has been detected in Sanluan PublicCMS up to 6.202506.d.Check if you run itEPSS 0.24%Apr 9, 2026
- Medium5.5A weakness has been identified in Zod jsVideoUrlParser up to 0.5.1.Check if you run itEPSS 0.37%Apr 9, 2026
- Medium5.5A security flaw has been discovered in code-projects Simple IT Discussion Forum 1.0.Check if you run itEPSS 0.25%Apr 9, 2026
- Medium4.1When restoring a session from cache, a pointer from the serialized session data is used in a free operation without validation.Check if you run itEPSS 0.17%Apr 9, 2026
- Medium6.3A padding oracle exists in wolfSSL's PKCS7 CBC decryption that could allow an attacker to recover plaintext through repeated decryption queries with modified ciphertext.Check if you run itEPSS 0.11%Apr 9, 2026
- Medium6.9In TLSX_EchChangeSNI, the ctx->extensions branch set extensions unconditionally even when TLSX_Find returned NULL.Check if you run itEPSS 0.51%Apr 9, 2026
- Medium5.9A stack buffer overflow exists in wolfSSL's PKCS7 implementation in the wc_PKCS7_DecryptOri() function in wolfcrypt/src/pkcs7.c.Check if you run itEPSS 0.18%Apr 9, 2026
- High7.4A vulnerability was identified in D-Link DIR-605L 2.13B01.Check if you run itEPSS 0.78%Apr 9, 2026
Sort