Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownCreating a draft release through the API returned an list that was built from a release without an ID, which matched every attachment that was not linked to a release.Open the advisoryOct 18, 2026
- Unknownreturned the metadata of every repository a user was watching without checking that the user still had access to it.Open the advisoryOct 18, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: ip_gre: Reject enabling collect metadata through changelink ipgre_netlink_parms() can enable collec…Open the advisoryOct 18, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: xfs: don't let hidden_space go negative in xfs_metafile_resv_init LOLLM points out that if the amou…Open the advisoryOct 18, 2026
- Low2.1A security vulnerability has been detected in WongKinYiu yolov9 0.1.Open the advisoryOct 18, 2026
- Low2.1A vulnerability was identified in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1.Open the advisoryOct 18, 2026
- Low2.1A vulnerability was found in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1.Open the advisoryOct 18, 2026
- Medium5.3The PickPlugins Product Designer for WooCommerce WordPress plugin through 1.0.40 does not perform any capability check and its nonce verification is inverted, acceptin…Open the advisoryOct 18, 2026
- Low3.6A flaw was found in libarchive.Check if you run itEPSS 0.11%Oct 16, 2026
- High8.8ZoneMinder is a free, open source closed-circuit television software application.Check if you run itEPSS 1.06%Oct 16, 2026
- High7.2European VAT Compliance Assistant for WooCommerce <= 1.36.10 - Unauthenticated Stored Cross-Site Scripting via CF-IPCountry HeaderCheck if you run itEPSS 0.27%Oct 16, 2026
- High7.2Payment forms, Buy now buttons, and Invoicing System | GetPaid <= 2.8.61 - Unauthenticated Stored Cross-Site Scripting via 'mmdwqzpoxadd' ParameterCheck if you run itEPSS 0.28%Oct 16, 2026
- Medium6.8WP Booking System <= 2.1.0.3 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via 'user_permission' Parameter via Cross-Form Nonce ReuseCheck if you run itEPSS 0.26%Oct 16, 2026
- High7.5Kirki <= 6.3.2 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Exposure via Context Smuggling via 'context' ParameterCheck if you run itEPSS 0.40%Oct 16, 2026
- Medium6.0A flaw was found in luksmeta.Check if you run itEPSS 0.11%Oct 16, 2026
- High8.8The WP Photo Album Plus plugin for WordPress is vulnerable to authenticated Command Injection in all versions up to, and including, 9.3.02.002 via the parameter of the…Check if you run itEPSS 1.47%Oct 16, 2026
- UnknownMalicious code in @flexmr/survey-conversation (npm)Open the advisoryOct 16, 2026
- UnknownMalicious code in @flexmr/survey-client (npm)Open the advisoryOct 16, 2026
- High8.1The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Privilege Escalation in all versio…Check if you run itEPSS 0.34%Oct 16, 2026
- High7.5The Nexter Extension – Security, Performance, Code Snippets & Site Toolkit plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and includ…Check if you run itEPSS 0.29%Oct 16, 2026
- Medium6.5The Mail Mint plugin for WordPress is vulnerable to SQL Injection via the 'filters' parameter of the /wp-json/mrm/v1/segments/contacts REST endpoint in versions up to,…Check if you run itEPSS 0.28%Oct 16, 2026
- High7.5The FunnelKit – Funnel Builder for WooCommerce Checkout plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.16.0.6 This…Check if you run itEPSS 0.32%Oct 16, 2026
- High8.0The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to SQL Injection via the Biographical Info field (second-order, via restore) in al…Check if you run itEPSS 0.34%Oct 16, 2026
- Medium5.9Wheels through 4.1.1 derives its default production error-email address from the Host header of the request that starts the application.Check if you run itEPSS 0.14%Oct 16, 2026
- Medium4.8A weakness has been identified in Ultralytics FastSAM up to b4ed20c2fed75eadc5aa7d8b09fedd137b873b52.Check if you run itEPSS 0.12%Oct 16, 2026
1,096 records · page 1 of 44
PreviousNext