Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5The Link Whisper Free WordPress plugin before 0.9.1 has a publicly accessible REST endpoint that allows unauthenticated settings updates.Check if you run itEPSS 0.19%Apr 7, 2026
- Critical9.8In parisneo/lollms version 2.1.0, the application's session management is vulnerable to improper access control due to the use of a weak secret key for signing JSON We…Check if you run itEPSS 0.51%Apr 7, 2026
- Medium5.4The Popup Box WordPress plugin before 5.5.0 does not properly validate nonces in the add_or_edit_popupbox() function before saving popup data, allowing unauthenticated…Check if you run itEPSS 0.14%Apr 7, 2026
- High7.8A vulnerability in the HuggingFace Transformers library, specifically in the class, allows for arbitrary code execution.Check if you run itEPSS 0.39%Apr 7, 2026
- Medium5.5Buffer Overflow Vulnerability in JP1/IT Desktop Management 2 - Manager on Windows, JP1/IT Desktop Management 2 - Operations Director on Windows, Job Management Partner…Check if you run itEPSS 0.14%Apr 7, 2026
- Critical9.8Remote Code Execution Vulnerability in JP1/IT Desktop Management 2 - Manager on Windows, JP1/IT Desktop Management 2 - Operations Director on Windows, Job Management P…Check if you run itEPSS 0.62%Apr 7, 2026
- Medium4.3In sec boot, there is a possible out of bounds write due to an integer overflow.Check if you run itEPSS 0.19%Apr 7, 2026
- High8.8In Modem, there is a possible out of bounds write due to a missing bounds check.Check if you run itEPSS 0.31%Apr 7, 2026
- High8.0In Modem, there is a possible out of bounds write due to a missing bounds check.Check if you run itEPSS 0.31%Apr 7, 2026
- Medium6.5In Modem, there is a possible system crash due to a logic error.Check if you run itEPSS 0.32%Apr 7, 2026
- Low2.1A flaw has been found in itsourcecode Construction Management System 1.0.Check if you run itEPSS 0.25%Apr 7, 2026
- High8.8Apache ActiveMQ Improper Input Validation VulnerabilityPatch nowKEVEPSS 98.26%Apr 7, 2026
- Medium6.2IBM Concert 1.0.0 through 2.2.0 creates temporary files with predictable names, which allows local users to overwrite arbitrary files via a symlink attack.Check if you run itEPSS 0.14%Apr 7, 2026
- Low2.1A vulnerability was identified in code-projects Online Hotel Booking 1.0.Check if you run itEPSS 0.37%Apr 7, 2026
- Medium5.5A vulnerability was found in Totolink A7100RU 7.4cu.2313_b20191024.Check if you run itEPSS 1.63%Apr 7, 2026
- High8.6Adobe Acrobat and Reader Prototype Pollution VulnerabilityPatch nowKEVEPSS 7.23%Apr 7, 2026
- Critical9.3nextendweb smart_slider_3 Embedded Malicious CodePatch nowKEVEPSS 0.55%Apr 7, 2026
- Critical9.3Weaver e-cology Missing Authentication for Critical FunctionPatch nowKEVEPSS 20.69%Apr 7, 2026
- Medium5.5A vulnerability has been found in Totolink A7100RU 7.4cu.2313_b20191024.Check if you run itEPSS 1.31%Apr 6, 2026
- Medium5.5A flaw has been found in Totolink A7100RU 7.4cu.2313_b20191024.Check if you run itEPSS 1.63%Apr 6, 2026
- Medium5.5A vulnerability was detected in Totolink A7100RU 7.4cu.2313_b20191024.Check if you run itEPSS 1.63%Apr 6, 2026
- Medium5.5A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024.Check if you run itEPSS 1.58%Apr 6, 2026
- High7.7Unsanitized input in the FileBrowser API in AWS Research and Engineering Studio (RES) version 2024.10 through 2025.12.01 might allow a remote authenticated actor to ex…Check if you run itEPSS 1.11%Apr 6, 2026
- High8.7Unsanitized control of user-modifiable attributes in the session creation component in AWS Research and Engineering Studio (RES) prior to version 2026.03 could allow a…Check if you run itEPSS 0.85%Apr 6, 2026
- High8.7Unsanitized input in an OS command in the virtual desktop session name handling in AWS Research and Engineering Studio (RES) version 2025.03 through 2025.12.01 might a…Check if you run itEPSS 1.03%Apr 6, 2026
Sort