Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to Missing…Check if you run itEPSS 0.36%Apr 15, 2026
- High8.8OWASP BLT is a QA testing and vulnerability disclosure platform that encompasses websites, apps, git repositories, and more.Check if you run itEPSS 0.60%Apr 15, 2026
- High8.7ApostropheCMS is an open-source Node.js content management system.Check if you run itEPSS 0.44%Apr 15, 2026
- Medium5.3ApostropheCMS is an open-source Node.js content management system.Check if you run itEPSS 0.52%Apr 15, 2026
- Low3.7ApostropheCMS is an open-source Node.js content management system.Check if you run itEPSS 0.32%Apr 15, 2026
- Medium5.5A flaw was found in the System Security Services Daemon (SSSD).Check if you run itEPSS 0.15%Apr 15, 2026
- Medium5.0Weblate is a web based localization tool.Check if you run itEPSS 0.33%Apr 15, 2026
- Medium5.0Weblate is a web based localization tool.Check if you run itEPSS 0.31%Apr 15, 2026
- High7.5An issue in the file handling logic of the component download.php of SAC-NFe v2.0.02 allows attackers to execute a directory traversal and read arbitrary files from th…Check if you run itEPSS 0.99%Apr 15, 2026
- Critical9.9A vulnerability in Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system…Check if you run itEPSS 5.60%Apr 15, 2026
- Critical9.9A vulnerability in Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system…Check if you run itEPSS 6.02%Apr 15, 2026
- Medium5.3A vulnerability in the authentication service feature of Cisco AsyncOS Software for Cisco Secure Web Appliance could allow an unauthenticated, remote attacker to bypas…Check if you run itEPSS 0.30%Apr 15, 2026
- Medium4.9ZDI-26-582: Cisco Identity Services Engine PatchUpdateListener Directory Traversal Information Disclosure VulnerabilityCheck if you run itEPSS 6.54%Apr 15, 2026
- Critical9.9ZDI-26-581: Cisco Identity Services Engine invokeScript Command Injection Remote Code Execution VulnerabilityCheck this weekEPSS 10.38%Apr 15, 2026
- Medium6.5Multiple vulnerabilities in Cisco Unity Connection could allow an authenticated, remote attacker to download arbitrary files from an affected system.Check if you run itEPSS 0.39%Apr 15, 2026
- Medium6.5Multiple vulnerabilities in Cisco Unity Connection could allow an authenticated, remote attacker to download arbitrary files from an affected system.Check if you run itEPSS 0.39%Apr 15, 2026
- Medium6.5A vulnerability in the web-based management interface of Cisco Unity Connection could allow an authenticated, remote attacker to perform an SQL injection attack agains…Check if you run itEPSS 0.23%Apr 15, 2026
- Medium4.7A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to redirect a user to a malicious web page.Check if you run itEPSS 0.20%Apr 15, 2026
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in ZAYTECH Smart Online Order for Clover clover-online-orders allows Cross Site Request Forgery.This issue affects Smar…Check if you run itEPSS 0.11%Apr 15, 2026
- High7.3Jaaz 1.0.30 contains a remote code execution vulnerability in its MCP STDIO command execution handling.Check if you run itEPSS 0.61%Apr 15, 2026
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in DeluxeThemes Userpro userpro allows Cross Site Request Forgery.This issue affects Userpro: from n/a through < 5.1.11.Check if you run itEPSS 0.10%Apr 15, 2026
- High8.7Certain HP DeskJet All in One devices may be vulnerable to remote code execution caused by a buffer overflow when specially crafted Web Services for Devices (WSD) scan…Check if you run itEPSS 0.29%Apr 15, 2026
- Medium6.5Mattermost versions 10.11.x <= 10.11.12, 11.5.x <= 11.5.0, 11.4.x <= 11.4.2, 11.3.x <= 11.3.2 fail to enforce atomic single-use consumption of guest magic link tokens,…Check if you run itEPSS 0.22%Apr 15, 2026
- Medium6.1The Product Pricing Table by WooBeWoo plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.0.Check if you run itEPSS 0.13%Apr 15, 2026
- High8.1Cross-Site Request Forgery (CSRF) vulnerability in Syed Balkhi Contact Form by WPForms wpforms-lite allows Cross Site Request Forgery.This issue affects Contact Form b…Check if you run itEPSS 0.14%Apr 15, 2026