Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1Document Gallery <= 5.1.1 - Reflected XSS via data-shortcode AttributePatch nowKEVEPSS 0.15%Oct 15, 2026
- UnknownExternal Control of File Name or PathPatch nowKEVEPSS 0.37%Oct 15, 2026
- Critical9.3The vulnerability exists within internal components of BeyondTrust’s Remote Support product.Patch nowKEVEPSS 1.18%Oct 15, 2026
- Critical9.8Gitea's Org-mode markup renderer processes INCLUDE directives supplied to the repository markup endpoint without preventing access to server-side files.Patch nowKEVEPSS 28.31%Oct 14, 2026
- Critical9.8Cisco Secure Email Gateway Relative Path Traversal VulnerabilityPatch nowKEVEPSS 1.57%Oct 14, 2026
- High8.5JVN#88474777: SiteGuard Server Edition vulnerable to OS command injectionPatch nowKEVEPSS 1.17%Oct 14, 2026
- Medium5.3External control of assumed-Immutable web parameter issue exists in EC-CUBE plugin (for EC-CUBE 4 series) "AmazonPay Plugin".Patch nowKEVEPSS 0.22%Oct 14, 2026
- High8.8Microsoft Windows Command Injection VulnerabilityPatch nowKEVEPSS 1.51%Oct 13, 2026
- Unknownwpusermanager wp_user_manager Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 2.73%Oct 13, 2026
- UnknownImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.56%Oct 13, 2026
- Unknownservmask all-in-one_wp_migration Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.43%Oct 13, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.96%Oct 13, 2026
- UnknownAuthorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 2.20%Oct 13, 2026
- UnknownMissing AuthorizationPatch nowKEVEPSS 2.65%Oct 13, 2026
- Unknownninjaforms ninja_forms_file_uploads Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.60%Oct 13, 2026
- Unknownproperfraction profilepress Improper Privilege ManagementPatch nowKEVEPSS 0.39%Oct 13, 2026
- Unknownwpforms wpforms Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 2.48%Oct 13, 2026
- Critical9.8Arbitrary file write in grpc phQueryMasterPatch nowKEVEPSS 0.46%Oct 13, 2026
- UnknownCodeDropz drag_and_drop_multiple_file_upload_-_contact_form_7 Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.37%Oct 13, 2026
- Unknowndynamiapps frontend_admin Improper Privilege ManagementPatch nowKEVEPSS 0.72%Oct 13, 2026
- Unknowngivewp givewp Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.39%Oct 13, 2026
- UnknownServer-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.50%Oct 13, 2026
- UnknownAuthentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 0.66%Oct 13, 2026
- Unknowngivewp givewp Deserialization of Untrusted DataPatch nowKEVEPSS 1.39%Oct 13, 2026
- Unknownhashthemes hash_form Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.37%Oct 13, 2026
Sort