Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.4IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to modify the BOOTP table due to improper authorization.Check if you run itEPSS 0.12%Oct 13, 2026
- Medium5.3IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform brute-force attacks to obtain credentials due to improper authentication.Check if you run itEPSS 0.28%Oct 13, 2026
- Medium5.3IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to enumerate user profiles due to the return of distinct error codes during the sign-on process.Check if you run itEPSS 0.24%Oct 13, 2026
- Medium5.5IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to cause a denial of service due to improper access control.Check if you run itEPSS 0.14%Oct 13, 2026
- Low2.4A vulnerability was identified in Linketic CityGaussian up to 2.0.Check if you run itEPSS 0.12%Oct 13, 2026
- Medium5.5A vulnerability was found in EricLBuehler Mistral.rs up to 0.9.3.Check if you run itEPSS 0.59%Oct 13, 2026
- Medium5.5A vulnerability has been found in EricLBuehler mistral.rs up to 0.9.3.Check if you run itEPSS 0.47%Oct 13, 2026
- MediumThe GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode in versions up to, a…Check if you run itEPSS 0.21%Oct 13, 2026
- MediumThe FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Unquoted popup Shortcode Attribute in all versions up to, and incl…Check if you run itEPSS 0.23%Oct 13, 2026
- MediumThe Email Marketing for WordPress and WooCommerce – Retainful plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data' parameter in all version…Check if you run itEPSS 0.20%Oct 13, 2026
- MediumThe SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.74.3 via the get_instance_css function.Check if you run itEPSS 0.73%Oct 13, 2026
- MediumThe Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Stored Cross-Site Scripting via the user profile 'Author Page' social link…Check if you run itEPSS 0.16%Oct 13, 2026
- High8.7The network messaging layer contained improper handling of highly compressed data affecting service availability.Check if you run itEPSS 0.36%Oct 13, 2026
- High7.1QAPI contained a stack-based buffer overflow affecting service availability.Check if you run itEPSS 0.24%Oct 13, 2026
- HighImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Greg Winiarski WPAdverts wpadverts allows Reflected XSS.This issu…Check if you run itEPSS 0.15%Oct 13, 2026
- HighImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Greg Winiarski WPAdverts wpadverts allows Stored XSS.This issue a…Check if you run itEPSS 0.15%Oct 13, 2026
- MediumThe Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'not_found' parameter in all versions up to, and including, 3.3.58 due t…Check if you run itEPSS 0.16%Oct 13, 2026
- High7.5Microsoft Security Advisory CVE-2026-96959 - .NET and Visual Studio Denial of Service VulnerabilityCheck if you run itEPSS 0.75%Oct 13, 2026
- High8.8Microsoft Windows Command Injection VulnerabilityPatch nowKEVEPSS 1.51%Oct 13, 2026
- HighThe Post Grid Gutenberg Blocks – PostX plugin for WordPress is vulnerable to Stored Cross-Site Scripting via display_name User Field in all versions up to, and includi…Check if you run itEPSS 0.24%Oct 13, 2026
- HighThe WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id_token' parameter…Check if you run itEPSS 0.32%Oct 13, 2026
- MediumThe Table Field Add-on for ACF and SCF plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Table Field Value in all versions up to, and including, 1.…Check if you run itEPSS 0.19%Oct 13, 2026
- HighThe Presto Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Tag in all versions up to, and including, 4.5.1 due to insu…Check if you run itEPSS 0.24%Oct 13, 2026
- HighThe Real Estate Manager – Property Listing and Agent Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'first_name' parameter in all…Check if you run itEPSS 0.29%Oct 13, 2026
- HighThe Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to generic SQL Injection via 'booking[service_id]'…Check if you run itEPSS 0.39%Oct 13, 2026