Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.1Missing AuthorizationPatch nowKEVEPSS 0.46%May 29, 2026
- Critical9.8Missing Authentication for Critical FunctionPatch nowKEVEPSS 1.86%May 29, 2026
- High7.2linkwhisper link_whisper_free Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.24%May 29, 2026
- Critical9.8acfextended advanced_custom_fields_extended Improper Privilege ManagementPatch nowKEVEPSS 0.87%May 28, 2026
- Critical9.8Oracle E-Business Suite Improper Privilege Management VulnerabilityPatch nowKEVEPSS 0.81%May 28, 2026
- Medium6.5The Independent Analytics plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.14.9.Patch nowKEVEPSS 0.44%May 28, 2026
- High7.3This vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation.Patch nowKEVEPSS 0.17%May 28, 2026
- Critical9.3Nx Console Embedded Malicious Code VulnerabilityPatch nowKEVEPSS 1.34%May 27, 2026
- High8.6Dozzle is a realtime log viewer for docker containers.Patch nowKEVEPSS 1.60%May 26, 2026
- Critical9.0A flaw was found in the Samba printing subsystem.Patch nowKEVEPSS 13.93%May 26, 2026
- Critical9.3Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 2.08%May 26, 2026
- Medium6.5Kludex Starlette HTTP Request/Response Smuggling VulnerabilityPatch nowKEVEPSS 7.06%May 26, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapress WP Activity Log allows DOM-Based XSS.Patch nowKEVEPSS 0.22%May 25, 2026
- High8.1Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has Pre-authentication SQL injection in the virtuser_query plugin via a preg_replace() backslash escape bypass.Patch nowKEVEPSS 0.89%May 25, 2026
- High7.8Linux Kernel Out-of-bounds WritePatch nowKEVEPSS 2.43%May 23, 2026
- High8.8Improper Privilege ManagementPatch nowKEVEPSS 0.45%May 23, 2026
- High8.8Microsoft SharePoint Server Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 2.70%May 22, 2026
- Unknownxiongmaitech uc-httpd Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 28.27%May 22, 2026
- Critical10.0Ubiquiti UniFi OS Improper Input Validation VulnerabilityPatch nowKEVEPSS 45.77%May 21, 2026
- Critical10.0Ubiquiti UniFi OS Path Traversal VulnerabilityPatch nowKEVEPSS 1.79%May 21, 2026
- Critical10.0Ubiquiti UniFi OS Improper Access Control VulnerabilityPatch nowKEVEPSS 15.21%May 21, 2026
- High7.8Linux Kernel 'net/rds' Local Privilege EscalationPatch nowKEVEPSS 0.19%May 21, 2026
- Critical9.8The Avada Builder (fusion-builder) plugin for WordPress is vulnerable to Unauthenticated Remote Code Execution via PHP Function Injection in versions up to and including 3.15.2.Patch nowKEVEPSS 2.39%May 21, 2026
- Medium6.7Trend Micro Apex One (On-Premise) Directory Traversal VulnerabilityPatch nowKEVEPSS 0.54%May 21, 2026
- Critical10.0LiteSpeed cPanel Plugin Privilege Escalation VulnerabilityPatch nowKEVEPSS 1.01%May 20, 2026