Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Critical9.8Missing Authentication for Critical FunctionKEVMay 29, 2026
- High7.2linkwhisper link_whisper_free Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')KEVEPSS 0.2%May 29, 2026
- Critical9.8acfextended advanced_custom_fields_extended Improper Privilege ManagementKEVMay 28, 2026
- Critical9.8Oracle E-Business Suite Improper Privilege Management VulnerabilityKEVEPSS 0.8%May 28, 2026
- Medium6.5The Independent Analytics plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.14.9.KEVEPSS 0.4%May 28, 2026
- High7.3This vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation.KEVEPSS 0.2%May 28, 2026
- Critical9.3Nx Console Embedded Malicious Code VulnerabilityKEVEPSS 1.3%May 27, 2026
- High8.6Dozzle is a realtime log viewer for docker containers.KEVEPSS 1.6%May 26, 2026
- Critical9.0A flaw was found in the Samba printing subsystem.KEVEPSS 13.9%May 26, 2026
- Critical9.3Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data VulnerabilityKEVEPSS 2.1%May 26, 2026
- Medium6.5Kludex Starlette HTTP Request/Response Smuggling VulnerabilityKEVEPSS 7.1%May 26, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapress WP Activity Log allows DOM-Based XSS.KEVEPSS 0.2%May 25, 2026
- High8.1Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has Pre-authentication SQL injection in the virtuser_query plugin via a preg_replace() backslash escape bypass.KEVEPSS 0.9%May 25, 2026
- High7.8Linux Kernel Out-of-bounds WriteKEVEPSS 2.4%May 23, 2026
- High8.8Improper Privilege ManagementKEVEPSS 0.4%May 23, 2026
- High8.8Microsoft SharePoint Server Deserialization of Untrusted Data VulnerabilityKEVEPSS 2.7%May 22, 2026
- Unknownxiongmaitech uc-httpd Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')KEVEPSS 28.3%May 22, 2026
- Critical10.0Ubiquiti UniFi OS Improper Input Validation VulnerabilityKEVEPSS 45.8%May 21, 2026
- Critical10.0Ubiquiti UniFi OS Path Traversal VulnerabilityKEVEPSS 1.8%May 21, 2026
- Critical10.0Ubiquiti UniFi OS Improper Access Control VulnerabilityKEVEPSS 15.2%May 21, 2026
- High7.8Linux Kernel 'net/rds' Local Privilege EscalationKEVEPSS 0.2%May 21, 2026
- Critical9.8The Avada Builder (fusion-builder) plugin for WordPress is vulnerable to Unauthenticated Remote Code Execution via PHP Function Injection in versions up to and including 3.15.2.KEVEPSS 2.4%May 21, 2026
- Medium6.7Trend Micro Apex One (On-Premise) Directory Traversal VulnerabilityKEVEPSS 0.5%May 21, 2026
- Critical10.0LiteSpeed cPanel Plugin Privilege Escalation VulnerabilityKEVEPSS 1.0%May 20, 2026
- Critical9.8Drupal Core SQL Injection VulnerabilityKEVEPSS 15.7%May 20, 2026