Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownCVE-2026-98527: gpio: zynq: fix runtime PM leak on request error pathOpen the advisoryOct 18, 2026
- Medium5.3A security flaw has been discovered in dyad-sh dyad up to 1.16.0.Open the advisoryOct 18, 2026
- Unknownsmb/server: cancel async requests when closing connectionOpen the advisoryOct 18, 2026
- UnknownEDAC/altera: Use parent device for devres in altr_portb_setup()Open the advisoryOct 18, 2026
- Low2.3Gitify before 7.10.0 contains a login cross-site request forgery vulnerability that allows remote attackers to bind a victim's client to their account because performG…Open the advisoryOct 18, 2026
- Medium5.3The PickPlugins Product Designer for WooCommerce WordPress plugin through 1.0.40 does not perform any capability check and its nonce verification is inverted, acceptin…Open the advisoryOct 18, 2026
- Medium4.9The AI Engine WordPress plugin before 3.7.9 does not check that the item passed to one of its media actions belongs to the requesting user before converting it to an a…Open the advisoryOct 18, 2026
- Low2.0A vulnerability has been found in David-Crty Databasement up to 1.8.1.Open the advisoryOct 18, 2026
- Low2.9A flaw has been found in OpenCATS 0.10.0.Open the advisoryOct 18, 2026
- Unknownplex media_server Server-Side Request Forgery (SSRF)Patch nowKEVOct 18, 2026
- Unknownplex media_server Server-Side Request Forgery (SSRF)Patch nowKEVOct 18, 2026
- High8.7Fleet before 4.83.0 contains a denial of service vulnerability that allows unauthenticated attackers to exhaust server memory by sending gzip-compressed request bodies.Open the advisoryOct 17, 2026
- Medium6.9Admidio before 5.0.16 contains an information disclosure vulnerability that allows unauthenticated attackers to view role-restricted weblinks because rss/links.php omi…Open the advisoryOct 17, 2026
- High7.1Admidio from 5.0.11 before 5.0.16 contains a broken access control vulnerability in modules/inventory/inventory_data.php that allows authenticated users to bypass the…Open the advisoryOct 17, 2026
- Medium5.3Admidio from 5.0.0 before 5.0.16 contains an authorization bypass vulnerability that allows authenticated users to export lists despite export restrictions by requesting mode=pdfl.Open the advisoryOct 17, 2026
- High7.1Admidio from 5.0.0 before 5.0.16 contains an insecure direct object reference vulnerability in ForumService::saveTopic() that allows authenticated members to modify ot…Open the advisoryOct 17, 2026
- High7.1phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an authorization bypass vulnerability in attachment.php that allows attackers to download attachments…Open the advisoryOct 17, 2026
- High7.2phpMyFAQ before 4.1.9 contains a missing authorization vulnerability in the deleteUser() API that allows authenticated non-superadmin users with delete_user permission…Open the advisoryOct 17, 2026
- High7.1phpMyFAQ 4.0.0 before 4.1.9 contains a cross-site request forgery vulnerability in the POST /admin/api/update-database endpoint, which executes database migrations wit…Open the advisoryOct 17, 2026
- High7.1phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a cross-site request forgery vulnerability in the Elasticsearch and OpenSearch administration API endp…Open the advisoryOct 17, 2026
- Medium6.9phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an information disclosure vulnerability that allows unauthenticated attackers to read hidden open questions due to an i…Open the advisoryOct 17, 2026
- High8.7phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an uncontrolled resource consumption vulnerability in the unauthenticated faqs and search API endpoints.Open the advisoryOct 17, 2026
- Medium5.3phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an improper authorization vulnerability in attachment.php that fails to verify whether an attachment's…Open the advisoryOct 17, 2026
- High7.1phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authorization bypass vulnerability that allows category-restricted editors to manage attachments of FAQs outside the…Open the advisoryOct 17, 2026
- Medium6.9phpMyFAQ 4.2.0-alpha before 4.2.0-beta lacks effective rate limiting on the unauthenticated user/password/update and user/password/reset endpoints.Open the advisoryOct 17, 2026