Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3The Booking Package plugin for WordPress is vulnerable to Price Manipulation in versions up to, and including, 1.7.06 This is due to the intentForStripe() function pas…Check if you run itEPSS 0.31%Apr 28, 2026
- Medium6.4The Woostify plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.5.0 This is due to insufficient input sanitization a…Check if you run itEPSS 0.21%Apr 28, 2026
- High7.8In KDE KCoreAddons before 6.25, KShell::quoteArgs is intended to safely quote arguments so that they can be passed to a shell command.Check if you run itEPSS 0.17%Apr 28, 2026
- Medium6.5KDE Dolphin before 25.12.3 allows applications in a Flatpak (or with AppArmor confinement) to open folders outside of the application sandbox without additional scrutiny.Check if you run itEPSS 0.13%Apr 28, 2026
- Medium5.9In Spring AI, an attacker can bypass conversation isolation and exfiltrate sensitive memory from other users’ chat histories, including secrets and credentials, by inj…Check if you run itEPSS 0.23%Apr 28, 2026
- High8.7Penetration Testing engineers at Amazon have identified a security flaw related to request handling in the web server component that could, under certain conditions, l…Check if you run itEPSS 0.19%Apr 28, 2026
- High8.5Penetration Testing engineers at Amazon discovered a vulnerability where the camera system failed to properly validate input, allowing specially crafted requests conta…Check if you run itEPSS 0.26%Apr 28, 2026
- Medium5.3Penetration Testing engineers at Amazon have discovered a flaw where the camera system fails to properly handle data supplied in certain requests, causing a service disruption.Check if you run itEPSS 0.24%Apr 28, 2026
- Medium5.5A weakness has been identified in BrowserOperator browser-operator-core up to 0.6.0.Check if you run itEPSS 0.43%Apr 28, 2026
- Medium6.1A vulnerability was determined in Artifex MuPDF up to 1.28.0.Check if you run itEPSS 0.24%Apr 28, 2026
- Low2.1A vulnerability was found in SourceCodester Safety Anger Pad 1.0.Check if you run itEPSS 0.26%Apr 28, 2026
- Low2.1A vulnerability was found in code-projects Coaching Management System 1.0.Check if you run itEPSS 0.23%Apr 28, 2026
- Medium5.4The Check & Log Email WordPress plugin before 2.0.13 does not properly handle email replacement, which could allow unauthenticated users to perform Stored XSS attacks…Check if you run itEPSS 0.15%Apr 28, 2026
- High8.6In Spring AI, various FilterExpressionConverter implementations accept a filter expression object and translate them to specific vector store query languages.Check if you run itEPSS 0.39%Apr 28, 2026
- High7.5In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accept_sec_context() on a system with a NegoECheck if you run itEPSS 0.60%Apr 28, 2026
- Medium5.5A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0.Check if you run itEPSS 0.25%Apr 28, 2026
- Medium5.5A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0.Check if you run itEPSS 0.25%Apr 28, 2026
- Medium5.5A security vulnerability has been detected in SourceCodester Pizzafy Ecommerce System 1.0.Check if you run itEPSS 0.25%Apr 28, 2026
- Medium5.5A weakness has been identified in SourceCodester Pizzafy Ecommerce System 1.0.Check if you run itEPSS 0.25%Apr 28, 2026
- Medium5.5A security flaw has been discovered in SourceCodester Pizzafy Ecommerce System 1.0.Check if you run itEPSS 0.25%Apr 28, 2026
- Medium6.4The Social Post Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Threads embed handler in all versions up to, and including, 2.0.1.Check if you run itEPSS 0.19%Apr 28, 2026
- Medium6.4The WPC Smart Messages for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'text' attribute of the shortcode in all versions up t…Check if you run itEPSS 0.19%Apr 28, 2026
- Medium6.4The Timeline Blocks for Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'titleTag' attribute of the timeline-blocks/tb-timeline-blo…Check if you run itEPSS 0.19%Apr 28, 2026
- High7.2OpenStack Ironic before 35.0.1 allows ipmitool execution in a non-default configuration that has a console interface.Check if you run itEPSS 0.57%Apr 28, 2026
- High7.5In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism registered in /Check if you run itEPSS 0.65%Apr 28, 2026
Sort