Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.0A weakness has been identified in MacCMS Pro up to 2022.1.3.Check if you run itEPSS 0.23%May 1, 2026
- Critical9.8The fix for CVE-2026-41635 was not applied to the 2.1.X and 2.2.X branches.Check if you run itEPSS 1.23%May 1, 2026
- Critical9.8The fix for CVE-2026-41409 was not applied to the 2.1.X and 2.2.X branches.Check if you run itEPSS 0.66%May 1, 2026
- High7.2Apache Neethi does not impose any restrictions on URIs when manually fetching remote policy references through the PolicyReference API.Check if you run itEPSS 0.50%May 1, 2026
- Critical9.8The Temporary Login plugin for WordPress is vulnerable to Authentication Bypass in versions up to and including 1.0.0.Check if you run itEPSS 9.25%May 1, 2026
- High7.5An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0.Check if you run itEPSS 0.98%May 1, 2026
- High8.0An issue was discovered in OpenStack Keystone before 29.0.2.Check if you run itEPSS 0.47%May 1, 2026
- High7.5Apache Neethi does not properly detect circular references in policy definitions.Check if you run itEPSS 0.76%May 1, 2026
- High7.5Apache Neethi is vulnerable to a Denial of Service attack through algorithmic complexity in policy normalization.Check if you run itEPSS 0.71%May 1, 2026
- Medium5.4@diplodoc/search-extension 1.0.0 through 3.x before 3.0.3 allows stored XSS via the title in a .md file.Check if you run itEPSS 0.24%May 1, 2026
- High8.4The LabOne Q serialization framework uses a class-loading mechanism (import_cls) to dynamically import and instantiate Python classes during deserialization.Check if you run itEPSS 0.26%May 1, 2026
- Critical10.0JS8Call through 2.3.1 and JS8Call-improved before 3.0 have a stack-based buffer overflow via a radio transmission of @APRSIS GRID followed by a long Maidenhead locator.Check if you run itEPSS 0.57%May 1, 2026
- Medium5.5A vulnerability was identified in itsourcecode Electronic Judging System 1.0.Check if you run itEPSS 0.26%May 1, 2026
- Low2.9A vulnerability was determined in D-Link M60 up to 1.20B02.Check if you run itEPSS 1.10%May 1, 2026
- Medium6.4The Elementor Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the _elementor_data meta field in versions up to, and including, 4.0.4.Check if you run itEPSS 0.22%May 1, 2026
- Medium6.1Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanit…Check if you run itEPSS 0.28%May 1, 2026
- Low2.0A vulnerability was found in code-projects Gym Management System 1.0.Check if you run itEPSS 0.21%May 1, 2026
- Medium5.5A vulnerability has been found in SourceCodester Pharmacy Sales and Inventory System 1.0.Check if you run itEPSS 0.26%May 1, 2026
- Medium5.5A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0.Check if you run itEPSS 0.27%May 1, 2026
- High8.8Bitwarden CLI 2026.4.0 from 2026-04-22T21:57Z to 2026-04-22T23:30Z, when obtained from npm, had embedded malicious code.Check if you run itEPSS 0.31%May 1, 2026
- High7.4A vulnerability was detected in Totolink NR1800X 9.1.0u.6279_B20210910.Check if you run itEPSS 1.49%May 1, 2026
- High8.9A security vulnerability has been detected in Totolink NR1800X 9.1.0u.6279_B20210910.Check if you run itEPSS 0.75%May 1, 2026
- Medium5.5A weakness has been identified in SourceCodester Advanced School Management System 1.0.Check if you run itEPSS 0.26%May 1, 2026
- High8.9A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521.Check if you run itEPSS 1.82%May 1, 2026
- Medium5.5A vulnerability was determined in Open5GS up to 2.7.7.Check if you run itEPSS 0.38%May 1, 2026
Sort