Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.0A security vulnerability has been detected in welovemedia FFmate up to 2.0.15.Check if you run itEPSS 0.25%Apr 1, 2026
- Low2.0A weakness has been identified in bufanyun HotGo 1.0/2.0.Check if you run itEPSS 0.25%Apr 1, 2026
- Low2.0A security flaw has been discovered in z-9527 admin 1.0/2.0.Check if you run itEPSS 0.28%Apr 1, 2026
- Low2.1A vulnerability was identified in z-9527 admin 1.0/2.0.Check if you run itEPSS 0.25%Apr 1, 2026
- Low2.0A vulnerability was found in gougucms 4.08.18.Check if you run itEPSS 0.20%Apr 1, 2026
- High7.1Addressed a potential insecure direct object reference (IDOR) vulnerability in the signing invitation acceptance process.Check if you run itEPSS 0.18%Apr 1, 2026
- High8.8Improper Restriction of XML External Entity Reference vulnerability in RTI Connext Professional (Recording Service,Routing Service,Queueing Service,Cloud Discovery Ser…Check if you run itEPSS 0.24%Apr 1, 2026
- Medium4.3The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the en…Check if you run itEPSS 0.24%Apr 1, 2026
- High7.8The application's installer runs with elevated privileges but resolves system executables and DLLs using untrusted search paths that can include user-writable director…Check if you run itEPSS 0.13%Apr 1, 2026
- High7.8The application's list box calculate array logic keeps stale references to page or form objects after they are deleted or re-created, which allows crafted documents to…Check if you run itEPSS 0.34%Apr 1, 2026
- Medium5.5The application does not detect or guard against cyclic PDF object references while handling JavaScript in PDF.Check if you run itEPSS 0.11%Apr 1, 2026
- High7.8The application does not properly validate the lifetime and validity of internal view cache pointers after JavaScript changes the document zoom and page state.Check if you run itEPSS 0.12%Apr 1, 2026
- Medium5.5The application does not validate the presence of required appearance (AP) data before accessing stamp annotation resources.Check if you run itEPSS 0.11%Apr 1, 2026
- High7.8The application's update service, when checking for updates, loads certain system libraries from a search path that includes directories writable by low‑privileged use…Check if you run itEPSS 0.26%Apr 1, 2026
- High7.5The application allows PDF JavaScript and document/print actions (such as WillPrint/DidPrint) to update form fields, annotations, or optional content groups (OCGs) imm…Check if you run itEPSS 0.11%Apr 1, 2026
- Low2.1A vulnerability has been found in gougucms 4.08.18.Check if you run itEPSS 0.25%Apr 1, 2026
- Medium5.1XenForo before 2.3.10 and before 2.2.19 is vulnerable to stored cross-site scripting (XSS) in structured text mentions, primarily affecting legacy profile post content.Check if you run itEPSS 0.17%Apr 1, 2026
- Medium5.1XenForo before 2.3.9 and before 2.2.18 is vulnerable to cross-site scripting (XSS) related to lightbox usage in posts.Check if you run itEPSS 0.16%Apr 1, 2026
- Medium5.1XenForo before 2.3.9 is vulnerable to stored cross-site scripting (XSS) related to BB code rendering.Check if you run itEPSS 0.14%Apr 1, 2026
- Medium6.3Buffer Over-read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers.Check if you run itEPSS 0.16%Apr 1, 2026
- High8.7XenForo before 2.3.7 discloses filesystem paths through exception messages triggered by open_basedir restrictions.Check if you run itEPSS 0.35%Apr 1, 2026
- High8.7XenForo before 2.3.7 does not properly restrict methods callable from within templates.Check if you run itEPSS 0.34%Apr 1, 2026
- Medium6.9XenForo before 2.3.7 allows information disclosure via local account page caching on shared systems.Check if you run itEPSS 0.12%Apr 1, 2026
- Critical9.3XenForo before 2.3.7 contains a security issue affecting Passkeys that have been added to user accounts.Check if you run itEPSS 0.46%Apr 1, 2026
- High8.7XenForo before 2.3.5 allows OAuth2 client applications to request unauthorized scopes.Check if you run itEPSS 0.27%Apr 1, 2026
Sort