Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8Linux Kernel 'net/rds' Local Privilege EscalationPatch nowKEVEPSS 0.19%May 21, 2026
- Critical9.8The Avada Builder (fusion-builder) plugin for WordPress is vulnerable to Unauthenticated Remote Code Execution via PHP Function Injection in versions up to and including 3.15.2.Patch nowKEVEPSS 7.22%May 21, 2026
- Medium6.7Trend Micro Apex One (On-Premise) Directory Traversal VulnerabilityPatch nowKEVEPSS 0.54%May 21, 2026
- Critical10.0LiteSpeed cPanel Plugin Privilege Escalation VulnerabilityPatch nowKEVEPSS 1.01%May 20, 2026
- Critical9.8Drupal Core SQL Injection VulnerabilityPatch nowKEVEPSS 15.70%May 20, 2026
- Critical10.0Unrestricted Upload of File with Dangerous Type vulnerability in WP Swings Gift Cards For WooCommerce Pro allows Using Malicious Files.Patch nowKEVEPSS 0.52%May 20, 2026
- Critical9.8Piotnet piotnet_forms Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 3.28%May 19, 2026
- Critical9.8Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.87%May 19, 2026
- High7.5Microsoft Defender Denial of Service VulnerabilityPatch nowKEVEPSS 1.27%May 19, 2026
- High7.8Microsoft Defender Link Following VulnerabilityPatch nowKEVEPSS 0.44%May 19, 2026
- Critical10.0CtrlPanel is open-source billing software for hosting providers.Patch nowKEVEPSS 4.54%May 19, 2026
- Critical9.3dify dify Relative Path TraversalPatch nowKEVEPSS 1.89%May 18, 2026
- High8.8The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Privilege Escalation in versions up to and including 3.28.36.Patch nowKEVEPSS 0.77%May 15, 2026
- High8.6lfprojects mlflow Authentication Bypass by Primary WeaknessPatch nowKEVEPSS 1.41%May 15, 2026
- Critical9.4Gotenberg is a Docker-powered stateless API for PDF files.Patch nowKEVEPSS 1.77%May 14, 2026
- Critical9.8Gotenberg is a Docker-powered stateless API for PDF files.Patch nowKEVEPSS 3.67%May 14, 2026
- Critical9.8The Burst Statistics – Privacy-Friendly WordPress Analytics (Google Analytics Alternative) plugin for WordPress is vulnerable to Authentication Bypass in versions 3.4.0 to 3.4.1.1.Patch nowKEVEPSS 3.01%May 14, 2026
- High8.7FunnelKit funnel_builder Missing AuthorizationPatch nowKEVEPSS 0.49%May 14, 2026
- Medium6.1Microsoft Exchange Server Cross-Site Scripting VulnerabilityPatch nowKEVEPSS 0.52%May 14, 2026
- Critical10.0Cisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityPatch nowKEVEPSS 91.82%May 14, 2026
- Medium5.3Nitro is a next generation server toolkit.Patch nowKEVEPSS 0.57%May 13, 2026
- Medium6.1A cross-site scripting (XSS) vulnerability exists in Alinto SOGo, version 5.12.7.Patch nowKEVEPSS 0.43%May 13, 2026
- High8.3CKAN is an open-source DMS (data management system) for powering data hubs and data portals.Patch nowKEVEPSS 2.19%May 13, 2026
- Critical9.2NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module.Patch nowKEVEPSS 3.40%May 13, 2026
- High7.5theme-fusion avada_builder Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.46%May 13, 2026
Sort