Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Check if you run itEPSS 0.47%Apr 8, 2026
- High7.4In Eclipse Jetty, the class JASPIAuthenticator initiates the authentication checks, which set two ThreadLocal variable.Check if you run itEPSS 0.53%Apr 8, 2026
- Medium5.3Wimi Teamwork On-Premises versions prior to 8.2.0 contain an insecure direct object reference vulnerability in the preview.php endpoint where the item_id parameter lac…Check if you run itEPSS 0.18%Apr 8, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: atm: fix crash due to unvalidated vcc pointer in sigd_send() Reproducer available at [1].Check if you run itEPSS 0.13%Apr 8, 2026
- Medium6.4The Page Builder: Pagelayer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Button widget's Custom Attributes field in all versions up to, an…Check if you run itEPSS 0.34%Apr 8, 2026
- Medium6.4A container privilege escalation flaw was found in certain Red Hat Process Automation Manager images.Check if you run itEPSS 0.14%Apr 8, 2026
- Medium6.4A container privilege escalation flaw was found in certain OpenShift Update Service (OSUS) images.Check if you run itEPSS 0.14%Apr 8, 2026
- Medium6.4A container privilege escalation flaw was found in certain Web Terminal images.Check if you run itEPSS 0.16%Apr 8, 2026
- Medium6.7A container privilege escalation flaw was found in certain Multicluster Engine for Kubernetes images.Check if you run itEPSS 0.11%Apr 8, 2026
- Medium6.4A container privilege escalation flaw was found in certain Ansible Automation Platform images.Check if you run itEPSS 0.18%Apr 8, 2026
- Critical9.3Cleartext Storage of Sensitive Information in GUI vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions…Check if you run itEPSS 0.10%Apr 8, 2026
- Critical9.3Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.…Check if you run itEPSS 0.10%Apr 8, 2026
- Medium5.5A new API endpoint introduced in pretix 2025 that is supposed to return all check-in events of a specific event in fact returns all check-in events belonging to the re…Check if you run itEPSS 0.26%Apr 8, 2026
- High8.1CORS misconfiguration in CoolerControl/coolercontrold <4.0.0 allows unauthenticated remote attackers to read data and send commands to the service via malicious websitesCheck if you run itEPSS 0.26%Apr 8, 2026
- Medium6.1Stored XSS in log viewer in CoolerControl/coolercontrol-ui <4.0.0 allows unauthenticated attackers to take over the service via malicious JavaScript in poisoned log entriesCheck if you run itEPSS 0.28%Apr 8, 2026
- Critical9.1Unauthenticated functionality in CoolerControl/coolercontrold <4.0.0 allows unauthenticated attackers to view and modify potentially sensitive data via HTTP requestsCheck if you run itEPSS 0.22%Apr 8, 2026
- Medium5.5Dell Elastic Cloud Storage, version 3.8.1.7 and prior, and Dell ObjectScale, versions prior to 4.1.0.3 and version 4.2.0.0, contains an Insertion of Sensitive Informat…Check if you run itEPSS 0.11%Apr 8, 2026
- High7.8Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.1.6 and versions 9.11.0.0 through 9.13.0.1, contains an incorrect privilege assignment vulnerability.Check if you run itEPSS 0.09%Apr 8, 2026
- Medium4.4Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.1.6 and versions 9.11.0.0 through 9.13.0.0, contains a generation of error message containing sensitive informatio…Check if you run itEPSS 0.16%Apr 8, 2026
- High7.2Command injection in alerts in CoolerControl/coolercontrold <4.0.0 allows authenticated attackers to execute arbitrary code as root via injected bash commands in alert namesCheck if you run itEPSS 0.97%Apr 8, 2026
- High7.5WCAPF – WooCommerce Ajax Product Filter plugin is vulnerable to time-based SQL Injection via the 'post-author' parameter in all versions up to, and including, 4.2.3 du…Check if you run itEPSS 1.47%Apr 8, 2026
- High8.8The Advanced Members for ACF plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the create_crop function in all…Check if you run itEPSS 0.81%Apr 8, 2026
- Medium6.4The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'settings[js]' parameter in v…Check if you run itEPSS 0.26%Apr 8, 2026
- Medium5.5Dell PowerProtect Agent Service, version(s) prior to 20.1, contain(s) an Incorrect Permission Assignment for Critical Resource vulnerability.Check if you run itEPSS 0.13%Apr 8, 2026
- Medium6.5The User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder plugin for Wor…Check if you run itEPSS 0.31%Apr 8, 2026
Sort