Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownThe Management Console fails to properly validate input related to the configuration of JDBC user stores.Open the advisoryOct 18, 2026
- UnknownCVE-2026-98483: nfc: fix use-after-free in nfc_get_local_general_bytesOpen the advisoryOct 18, 2026
- UnknownJQ::Lite versions before 2.51 for Perl execute Perl code embedded in a query's regular expression by compiling it with string eval.Open the advisoryOct 18, 2026
- High7.1The WP Photo Album Plus WordPress plugin before 9.2.11.002 does not properly escape a category navigation value before reflecting it into a JavaScript event handler on…Open the advisoryOct 18, 2026
- Medium6.8The BSK PDF Manager WordPress plugin through 3.8.1 does not properly sanitise and escape a parameter before using it in a SQL statement, which could allow authenticate…Check if you run itEPSS 0.16%Oct 17, 2026
- Medium5.9Nfs-utils: nfs-utils: denial of service via memory leak in rpc.statdCheck if you run itEPSS 0.31%Oct 16, 2026
- Medium6.5Text::CSV_XS versions before 1.65 for Perl return a 0xFF byte that is not in the input for an empty last field followed by a lone CR in parseCheck if you run itEPSS 0.19%Oct 16, 2026
- Medium5.9Text::CSV_XS versions before 1.65 for Perl read before the start of an all-blank field under allow_whitespace in strip_trail_whitespaceCheck if you run itEPSS 0.19%Oct 16, 2026
- Medium5.3Text::CSV_XS versions before 1.65 for Perl allow record splitting by writing strings used as numbers without quotes in combineCheck if you run itEPSS 0.19%Oct 16, 2026
- Medium5.3Text::CSV_XS versions before 1.65 for Perl drop the end of a record and its line ending when a UTF-8 flagged field precedes invalid UTF-8 bytes in printCheck if you run itEPSS 0.19%Oct 16, 2026
- Medium5.3Text::CSV_XS versions before 1.65 for Perl allow quadratic CPU use by copying the unparsed remainder per record of CR-only input in getlineCheck if you run itEPSS 0.19%Oct 16, 2026
- Medium5.3perl-Text-CSV_XS: perl-Text-CSV_XS: Denial of Service via memory leak during malformed CSV parsingCheck if you run itEPSS 0.19%Oct 16, 2026
- Medium5.5perl-text-csv_xs: perl-text-csv_xs: Denial of Service via use-after-free when parsing empty rowsCheck if you run itEPSS 0.19%Oct 16, 2026
- High7.5perl-Text-CSV_XS: perl-Text-CSV_XS: Denial of Service via excessive memory allocation in fragment selectorCheck if you run itEPSS 0.19%Oct 16, 2026
- High8.8ZoneMinder is a free, open source closed-circuit television software application.Check if you run itEPSS 1.06%Oct 16, 2026
- Medium6.8WP Booking System <= 2.1.0.3 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via 'user_permission' Parameter via Cross-Form Nonce ReuseCheck if you run itEPSS 0.26%Oct 16, 2026
- High7.5WP Booking System <= 2.1.0.3 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'wpbs_action=email_logs' ActionCheck if you run itEPSS 0.32%Oct 16, 2026
- Medium6.5LearnPress <= 4.4.10 - Missing Authorization to Authenticated (Subscriber+) Email Address Enumeration via 'search-authors' AJAX ActionCheck if you run itEPSS 0.25%Oct 16, 2026
- UnknownSecurity update for ImageMagickOpen the advisoryOct 16, 2026
- Medium4.3Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to properly restrict private teams from public team search results, w…Check if you run itEPSS 0.16%Oct 16, 2026
- Medium5.4The The User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder plugin for…Check if you run itEPSS 0.18%Oct 16, 2026
- Medium6.8The Photo Engine (Media Organizer & Lightroom) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.5.6 This is due to th…Check if you run itEPSS 0.46%Oct 16, 2026
- High7.8A flaw was found in cifs-utils.Check if you run itEPSS 0.15%Oct 16, 2026
- Medium5.4The The Slim SEO – AI SEO Plugin, Lightweight, Fast & Automated plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and includin…Check if you run itEPSS 0.23%Oct 16, 2026
- Medium5.3Salon Booking System < 10.31.9 - Unauthenticated Booking Creation with Arbitrary Customer ID and StatusCheck if you run itEPSS 0.22%Oct 16, 2026
1,464 records · page 1 of 59
PreviousNext