Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4The Smart Slider 3 plugin for WordPress is vulnerable to unauthorized access and modification of data due to missing capability checks on multiple wp_ajax_smart-slider…Check if you run itEPSS 0.36%Apr 7, 2026
- High8.8Improper removal of sensitive information before storage or transfer vulnerability in The Wikimedia Foundation Mediawiki - CentralAuth Extension allows Resource Leak Exposure.Check if you run itEPSS 0.27%Apr 7, 2026
- Medium6.9Loop with unreachable exit condition ('infinite loop') vulnerability in The Wikimedia Foundation Mediawiki - GrowthExperiments Extension allows Leveraging Time-of-Chec…Check if you run itEPSS 0.33%Apr 7, 2026
- Medium6.9Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foundation Mediawiki - GlobalWatchlist Extension al…Check if you run itEPSS 0.35%Apr 7, 2026
- High7.5Emmett is a full-stack Python web framework designed with simplicity.Check if you run itEPSS 0.51%Apr 7, 2026
- Critical9.0SiYuan is a personal knowledge management system.Check if you run itEPSS 0.56%Apr 7, 2026
- High7.6MCP Java SDK is the official Java SDK for Model Context Protocol servers and clients.Check if you run itEPSS 0.14%Apr 7, 2026
- High7.5Aardvark-dns is an authoritative dns server for A/AAAA container records.Check if you run itEPSS 0.40%Apr 7, 2026
- Low3.3Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.Check if you run itEPSS 0.15%Apr 7, 2026
- High8.8Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.Check if you run itEPSS 0.30%Apr 7, 2026
- High8.7Botan is a C++ cryptography library.Check if you run itEPSS 0.24%Apr 7, 2026
- Critical9.3Botan is a C++ cryptography library.Check if you run itEPSS 0.46%Apr 7, 2026
- Medium6.3LibreChat is a ChatGPT clone with additional features.Check if you run itEPSS 0.27%Apr 7, 2026
- High8.7Flatpak is a Linux application sandboxing and distribution framework.Check if you run itEPSS 0.33%Apr 7, 2026
- Critical9.3Flatpak is a Linux application sandboxing and distribution framework.Check if you run itEPSS 1.71%Apr 7, 2026
- High7.5Issue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can send contents of an uninitialized memory buffer to a malicious peer.Check if you run itEPSS 1.05%Apr 7, 2026
- Critical9.8Issue summary: Converting an excessively large OCTET STRING value to a hexadecimal string leads to a heap buffer overflow on 32 bit platforms.Check if you run itEPSS 0.25%Apr 7, 2026
- High7.5Issue summary: During processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo a NULL pointer dereference can happen.Check if you run itEPSS 0.84%Apr 7, 2026
- High7.5Issue summary: During processing of a crafted CMS EnvelopedData message with KeyAgreeRecipientInfo a NULL pointer dereference can happen.Check if you run itEPSS 0.84%Apr 7, 2026
- High7.5Issue summary: When a delta CRL that contains a Delta CRL Indicator extension is processed a NULL pointer dereference might happen if the required CRL Number extension is missing.Check if you run itEPSS 0.92%Apr 7, 2026
- High8.1Issue summary: An uncommon configuration of clients performing DANE TLSA-based server authentication, when paired with uncommon server DANE TLSA records, may result in…Check if you run itEPSS 0.70%Apr 7, 2026
- High7.5Issue summary: Applications using AES-CFB128 encryption or decryption on systems with AVX-512 and VAES support can trigger an out-of-bounds read of up to 15 bytes when…Check if you run itEPSS 0.52%Apr 7, 2026
- Medium5.3Cronicle is a multi-server task scheduler and runner, with a web based front-end UI.Check if you run itEPSS 0.18%Apr 7, 2026
- Medium5.3Cronicle is a multi-server task scheduler and runner, with a web based front-end UI.Check if you run itEPSS 0.18%Apr 7, 2026
- Critical9.8@delmaredigital/payload-puck is a PayloadCMS plugin for integrating Puck visual page builder.Check if you run itEPSS 0.39%Apr 7, 2026
Sort