Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9Improperly built filter clauses lead to a SQL injection vulnerability in the search query for com_finder.Check if you run itEPSS 0.45%May 26, 2026
- Medium5.3IBM watsonx.data 2.2 through 2.3.1 IBM Lakehouse does not properly restrict inbound and outbound connections which could allow an attacker to transfer or modify files…Check if you run itEPSS 0.17%May 26, 2026
- Medium6.5e107 is a content management system (CMS).Check if you run itEPSS 0.17%May 26, 2026
- High7.5Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header.Check if you run itEPSS 0.45%May 26, 2026
- High7.5Archive::Tar versions before 3.08 for Perl extract hardlinks to attacker controlled paths outside the extraction directory.Check if you run itEPSS 0.47%May 26, 2026
- Critical9.1Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory.Check if you run itEPSS 0.43%May 26, 2026
- Critical9.8Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have a heap buffer overflow when compiling regular expressions with a repeat…Check if you run itEPSS 0.48%May 26, 2026
- Medium5.9HP ENVY 5000 series printers VERBASPP1N003.2237A.00 do not properly manage concurrent TCP connections to port 9100 (JetDirect/RAW printing).Check if you run itEPSS 0.21%May 22, 2026
- Medium6.5Typebot is a chatbot builder tool.Check if you run itEPSS 0.52%May 22, 2026
- Critical9.2NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module.Check if you run itEPSS 2.70%May 22, 2026
- High7.5Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to properly validate msgpack-encoded WebSocket frames before memory…Check if you run itEPSS 0.57%May 22, 2026
- High7.5The Ditty – Responsive News Tickers, Sliders, and Lists plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.1.65.Check if you run itEPSS 0.59%May 22, 2026
- Medium4.3The Vedrixa Forms – User Registration Form, Signup Form & Drag & Drop Form Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, an…Check if you run itEPSS 0.40%May 22, 2026
- Medium5.3The MotoPress Hotel Booking plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.0.1.Check if you run itEPSS 0.47%May 22, 2026
- Medium6.5An authenticated SSH client that repeatedly opened channels which were rejected by the server caused unbounded memory growth, eventually crashing the server process an…Check if you run itEPSS 0.28%May 22, 2026
- Medium5.1Catalyst::Plugin::Authentication versions through 0.10024 for Perl is susceptible to timing attacks.Check if you run itEPSS 0.18%May 21, 2026
- Medium5.1In the Drupal 7 Term Reference Tree module, two stored XSS vectors exist in the widget/formatter rendering pipeline.Check if you run itEPSS 0.26%May 21, 2026
- High7.5Authen::TOTP versions before 0.1.1 for Perl generate secrets using rand.Check if you run itEPSS 0.49%May 21, 2026
- High7.8Linux Kernel 'net/rds' Local Privilege EscalationPatch nowKEVEPSS 0.19%May 21, 2026
- High8.4ptrace(PT_SC_REMOTE) failed to properly validate parameters for the syscall(2) and __syscall(2) meta-system calls.Check if you run itEPSS 0.18%May 21, 2026
- Medium6.1Mattermost Mobile Apps versions <=2.37 11.4 2.0.37 11.0.4 11.1.3 11.3.2 10.11.11.0 fail to properly validate the SSO authentication callback origin which allows an att…Check if you run itEPSS 0.12%May 21, 2026
- Low3.0Netatalk 2.2.1 through 4.4.2 calls system() after a failed chdir() without properly handling the error condition, which allows a local privileged user to execute unint…Check if you run itEPSS 0.12%May 21, 2026
- Critical9.1Crypt::SaltedHash versions through 0.09 for Perl generate insecure random values for salts.Check if you run itEPSS 0.51%May 20, 2026
- High7.5Crypt::SaltedHash versions through 0.09 for Perl is susceptible to timing attacks.Check if you run itEPSS 0.49%May 20, 2026
- High8.8The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin for WordPress is vulnerable to Missing Authorization in versions…Check if you run itEPSS 0.44%May 20, 2026