Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- MediumThe Data Tables Generator by Supsystic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Table Cell 'data' Value via updateRows Action in all versi…Check if you run itEPSS 0.24%Oct 13, 2026
- HighImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in hexpm hex allows a malicious package publisher to delete a directory ou…Check if you run itEPSS 0.40%Oct 13, 2026
- MediumGitea private repository access retained after rejected transferCheck if you run itEPSS 0.21%Oct 13, 2026
- HighGitea expanded a workflow's static into its full Cartesian product without a size limit when creating a run, before the fork pull request approval gate applied.Check if you run itEPSS 0.35%Oct 13, 2026
- MediumThe User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission plugin for WordPress is vulnerable…Check if you run itEPSS 0.22%Oct 13, 2026
- HighThe WP Meteor Website Speed Optimization Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Author Name in all versions up to, and inc…Check if you run itEPSS 0.24%Oct 13, 2026
- MediumThe Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'stm_f_s' parameter in all versions…Check if you run itEPSS 0.20%Oct 13, 2026
- HighThe Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'qsm_hidden_questions'…Check if you run itEPSS 0.24%Oct 13, 2026
- Medium5.1Cross-Site Scripting on the YouMind portal, specifically in the avatar update endpoint, when setting a profile picture via an arbitrary URL.Check this weekEPSS 23.00%Oct 13, 2026
- HighWhen Gitea's web installer is reachable against a database that already contains users, such as after has been reset to , submitting the install form with an administr…Check if you run itEPSS 0.44%Oct 13, 2026
- MediumGitea migration SSRF to reserved addresses through ALLOWED_DOMAINSCheck if you run itEPSS 0.20%Oct 13, 2026
- HighA repository's external issue tracker regular expression containing alternating capture groups could produce invalid slice indexes when Gitea rendered issue references…Check if you run itEPSS 0.35%Oct 13, 2026
- HighIncorrect Privilege Assignment vulnerability in WPMU DEV Forminator forminator allows Privilege Escalation.This issue affects Forminator: from n/a through 1.57.3.Check if you run itEPSS 0.28%Oct 13, 2026
- HighMissing limits on resource use in the match expression evaluator of MongoDB Server can cause the server to consume excessive memory.Check if you run itEPSS 0.24%Oct 13, 2026
- MediumUse of freed memory in the aggregation feature of MongoDB Server can cause the server to read data from a memory area after it has been released.Check if you run itEPSS 0.22%Oct 13, 2026
- HighThe WP Photo Album Plus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REQUEST_URI Session History in all versions up to, and including, 9.3.03.…Check if you run itEPSS 0.25%Oct 13, 2026
- HighIBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in host firmware configuration parsing.Check if you run itEPSS 0.17%Oct 13, 2026
- HighIBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in the service processor mailbox interface.Check if you run itEPSS 0.17%Oct 13, 2026
- HighCVE-2026-96264 is listed by an advisory.Check if you run itEPSS 0.17%Oct 13, 2026
- HighIBM Power Systems Firmware FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in the host firmwar…Check if you run itEPSS 0.17%Oct 13, 2026
- HighCVE-2026-96262 is listed by an advisory.Check if you run itEPSS 0.17%Oct 13, 2026
- HighIBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in host firmware configuration parsing.Check if you run itEPSS 0.14%Oct 13, 2026
- Critical9.9IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information or execute arbitrary code on the system due to improper data s…Check if you run itEPSS 0.52%Oct 13, 2026
- CriticalIBM Db2 Mirror for i 7.4, 7.5, and 7.6 is vulnerable to privilege escalation.Check if you run itEPSS 0.51%Oct 13, 2026
- HighThe VikBooking Hotel Booking Engine & PMS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'attachments[name]' Parameter in all versions up to, an…Check if you run itEPSS 0.24%Oct 13, 2026