Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.7Ollama for Windows does not perform integrity or authenticity verification of downloaded update executables.Check if you run itEPSS 0.73%Apr 29, 2026
- Medium6.1The WP Meteor Website Speed Optimization Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'frontend_rewrite' function's 'WPMETEOR[N]WPME…Check if you run itEPSS 0.21%Apr 29, 2026
- Medium5.3Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving static resources.Check if you run itEPSS 0.34%Apr 29, 2026
- Low3.1Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources.Check if you run itEPSS 0.24%Apr 29, 2026
- Medium6.5A WebFlux server application that processes multipart requests creates temp files for parts larger than 10 K.Check if you run itEPSS 0.34%Apr 29, 2026
- Medium5.3The Complianz – GDPR/CCPA Cookie Consent plugin for WordPress is vulnerable to unauthorized data access in all versions up to, and including, 7.4.5 This is due to the…Check if you run itEPSS 0.28%Apr 29, 2026
- High8.7This vulnerability exists in e-Sushrut due to disclosure of sensitive information and hardcoded AES encryption keys in client-side JavaScript.Check if you run itEPSS 0.22%Apr 29, 2026
- High7.1This vulnerability exists in e-Sushrut due to the use of reversible Base64 encoding for protecting sensitive data.Check if you run itEPSS 0.23%Apr 29, 2026
- High7.1This vulnerability exists in e-Sushrut due to improper authorization checks during resource access.Check if you run itEPSS 0.23%Apr 29, 2026
- High7.1This vulnerability exists in e-Sushrut due to improper access control in resource access validation.Check if you run itEPSS 0.23%Apr 29, 2026
- High8.8This vulnerability exists in e-Sushrut due to exposure of OTPs in plaintext within API responses.Check if you run itEPSS 0.23%Apr 29, 2026
- High8.8This vulnerability exists in e-Sushrut due to improper authentication logic that relies on client-side response parameters to determine authentication status.Check if you run itEPSS 0.48%Apr 29, 2026
- Medium6.5Missing Authorization vulnerability in weDevs WP User Frontend allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.19%Apr 29, 2026
- Critical10.0SQL injection (SQLi) in MegaCMS v12.0.0, specifically in the “id_territorio” parameter of the “/web_comunications/cms/get_provincias” endpoint.Check if you run itEPSS 0.27%Apr 29, 2026
- Medium6.1The authentication endpoint accepts user-supplied input without enforcing expected validation constraints, leading to a lack of proper output encoding.Check if you run itEPSS 0.17%Apr 29, 2026
- High7.3Missing Authorization vulnerability in Brainstorm Force SureForms Pro allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.23%Apr 29, 2026
- High7.1Dell iDRAC10, versions 1.20.70.50 and 1.30.05.10, contains an Insufficiently Protected Credentials vulnerability.Check if you run itEPSS 0.22%Apr 29, 2026
- Medium6.9Insufficient verification of data authenticity in PackageManagerService prior to SMR Mar-2026 Release 1 allows local attackers to modify the installation restriction o…Check if you run itEPSS 0.10%Apr 29, 2026
- High7.2GCHQ CyberChef before 11.0.0 allows XSS via Show Base64 offsets, as demonstrated by the /#recipe=Show_Base64_offsets('%3Cscript substring.Check if you run itEPSS 0.29%Apr 29, 2026
- Medium4.3Dell Disk Library for Mainframe, version(s) DLm 8700/2700 contain(s) a Server-Side Request Forgery (SSRF) vulnerability.Check if you run itEPSS 0.24%Apr 29, 2026
- High7.5Starman versions before 0.4018 for Perl allows HTTP Request Smuggling via Improper Header Precedence.Check if you run itEPSS 0.49%Apr 29, 2026
- UnknownJoomSport – for Sports: Team & League 'sortf' SQL InjectionPatch nowKEVEPSS 1.32%Apr 29, 2026
- High8.8Use after free in Canvas in Google Chrome on Linux, ChromeOS prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Check if you run itEPSS 0.38%Apr 28, 2026
- High8.8Use after free in iOS in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 0.33%Apr 28, 2026
- Low3.1Insufficient validation of untrusted input.Check if you run itEPSS 0.20%Apr 28, 2026
Sort