Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1The Import and export users and customers plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.29.7.Patch nowKEVEPSS 0.54%Mar 21, 2026
- High7.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 2.41%Mar 20, 2026
- Critical9.8Mesop is a Python-based UI framework that allows users to build web applications.Patch nowKEVEPSS 4.11%Mar 20, 2026
- Critical9.8The Kali Forms plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.4.9 via the 'form_process' function.Patch nowKEVEPSS 4.43%Mar 20, 2026
- Critical9.3Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.40%Mar 20, 2026
- Critical9.8Oracle identity_manager Missing Authentication for Critical FunctionPatch nowKEVEPSS 1.03%Mar 20, 2026
- Medium6.9bmc footprints Missing Authentication for Critical FunctionPatch nowKEVEPSS 44.58%Mar 19, 2026
- High8.6Kan is an open-source project management tool.Patch nowKEVEPSS 1.74%Mar 19, 2026
- Critical9.3Langflow Code Injection VulnerabilityPatch nowKEVEPSS 24.75%Mar 19, 2026
- Critical9.0ConnectWise ScreenConnect Improper Verification of Cryptographic SignaturePatch nowKEVEPSS 0.29%Mar 17, 2026
- High7.18theme XStore Core Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.18%Mar 17, 2026
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.40%Mar 16, 2026
- High7.5NSquared simply_schedule_appointments Missing AuthorizationPatch nowKEVEPSS 0.52%Mar 13, 2026
- Low2.1A security vulnerability has been detected in whyour qinglong up to 2.20.1.Patch nowKEVEPSS 0.48%Mar 12, 2026
- High8.8Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer VulnerabilityPatch nowKEVEPSS 1.07%Mar 12, 2026
- High8.8Google Skia Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 2.34%Mar 12, 2026
- High7.5The My Sticky Bar plugin for WordPress is vulnerable to SQL injection via the AJAX action in all versions up to, and including, 2.8.6.Patch nowKEVEPSS 0.58%Mar 12, 2026
- UnknownD-Link dir-823g_firmware Incorrect Privilege AssignmentPatch nowKEVEPSS 1.96%Mar 12, 2026
- Unknowndeltek maconomy Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 84.22%Mar 12, 2026
- Critical9.3Lantronix EDS5000 Code Injection VulnerabilityPatch nowKEVEPSS 19.96%Mar 11, 2026
- High7.5The Ally – Web Accessibility & Usability plugin for WordPress is vulnerable to SQL Injection via the URL path in all versions up to, and including, 4.0.3.Patch nowKEVEPSS 2.33%Mar 11, 2026
- High8.8The Royal Addons for Elementor plugin for WordPress is vulnerable to arbitrary file upload in all versions up to, and including, 1.7.1049.Patch nowKEVEPSS 0.49%Mar 11, 2026
- UnknownTOTOLINK n350r_firmware Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 2.13%Mar 11, 2026
- UnknownTenda ac6_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 3.29%Mar 11, 2026
- Unknownlollms lollms-webui Path Traversal: '\..\filename'Patch nowKEVEPSS 0.67%Mar 11, 2026