Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7Easy PayPal Events & Tickets plugin for WordPress before version 1.4 contains a hardcoded authentication bypass vulnerability in the QR code scanning functionality tha…Check if you run itEPSS 0.45%May 4, 2026
- High7.2BusyBox before commit 42202bf contains a heap buffer overflow vulnerability in the DHCPv6 client (udhcpc6) DNS_SERVERS option handler in networking/udhcp/d6_dhcpc.c th…Check if you run itEPSS 0.38%May 4, 2026
- High8.8In adbd_tls_verify_cert of auth.cpp, there is a possible bypass of wireless ADB mutual authentication due to a logic error in the code.Check if you run itEPSS 0.54%May 4, 2026
- Critical9.4In Apache Iceberg, the table's metadata files are control files: they tell readers which data files belong to the table and which table version to read.Check if you run itEPSS 0.36%May 4, 2026
- Critical9.4In plain terms, Apache Polaris is supposed to issue short-lived GCS credentials that only work for one table's files, but a crafted namespace or table name can cause t…Check if you run itEPSS 0.43%May 4, 2026
- Critical9.4Apache Polaris accepts literal characters in namespace and table names.Check if you run itEPSS 0.43%May 4, 2026
- Critical9.4Apache Polaris can issue broad temporary ("vended") storage credentials during staged table creation before the effective table location has been validated or durably reserved.Check if you run itEPSS 0.36%May 4, 2026
- High7.5OOM Denial of Service via Unbounded Array Allocation in Apache OpenNLP AbstractModelReader Versions Affected: before 1.9.5 before 2.5.9 before 3.0.0-M3 Description: Th…Check if you run itEPSS 0.60%May 4, 2026
- Critical9.8D-Link DIR-456U Hardware Revision A1 (End-of-Life, EOL) contains a hardcoded telnet backdoor.Check if you run itEPSS 0.46%May 4, 2026
- High8.8D-Link DIR-600L Hardware Revision A1 (End-of-Life) contains a hardcoded telnet backdoor.Check if you run itEPSS 0.47%May 4, 2026
- High8.8D-Link DIR-600L Hardware Revision B1 (End-of-Life) contains a hardcoded telnet backdoor.Check if you run itEPSS 0.47%May 4, 2026
- High8.8D-Link DIR-605L Hardware Revision B2 (End-of-Life, EOL) contains a hardcoded telnet backdoor.Check if you run itEPSS 0.47%May 4, 2026
- High8.8D-Link DIR-605L Hardware Revision A1 (End-of-Life, EOL) contains a hardcoded telnet backdoor.Check if you run itEPSS 0.30%May 4, 2026
- Critical9.6Notesnook is a note-taking app focused on user privacy & ease of use.Check if you run itEPSS 0.48%May 4, 2026
- Medium4.6PPTAgent is an agentic framework for reflective PowerPoint generation.Check if you run itEPSS 0.20%May 4, 2026
- High8.6PPTAgent is an agentic framework for reflective PowerPoint generation.Check if you run itEPSS 0.14%May 4, 2026
- Medium4.6PPTAgent is an agentic framework for reflective PowerPoint generation.Check if you run itEPSS 0.20%May 4, 2026
- Medium5.2Evolver is a GEP-powered self-evolving engine for AI agents.Check if you run itEPSS 0.16%May 4, 2026
- Critical9.8Evolver is a GEP-powered self-evolving engine for AI agents.Check if you run itEPSS 1.70%May 4, 2026
- High8.1Evolver is a GEP-powered self-evolving engine for AI agents.Check if you run itEPSS 0.64%May 4, 2026
- Critical9.8Arbitrary Class Instantiation via Model Manifest in Apache OpenNLP ExtensionLoader Versions Affected: before 1.9.5, before 2.5.9, before 3.0.0-M3 Description: The Exte…Check if you run itEPSS 0.71%May 4, 2026
- Critical9.1XML External Entity (XXE) via Unsanitized Dictionary Parsing in Apache OpenNLP DictionaryEntryPersistor Versions Affected: before 2.5.9, before 3.0.0-M3 Description: T…Check if you run itEPSS 0.50%May 4, 2026
- Medium6.1wCMS v.1.4 is vulnerable to Cross Site Scripting (XSS) when creating a new blog.Check if you run itEPSS 0.15%May 4, 2026
- High7.5An out-of-bounds read in the ParseIP6Extended function (/bgp/bgp.go) of gobgp v4.3.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UPDATE message.Check if you run itEPSS 0.34%May 4, 2026
- High8.7NetBox versions 4.3.5 through 4.5.4 contain a remote code execution vulnerability in the RenderTemplateMixin.get_environment_params() method that allows authenticated…Check if you run itEPSS 0.78%May 4, 2026
Sort