Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3eaSYNC < 1.3.31 - Unauthenticated Cancellation Request Creation and Email Template UpdateCheck if you run itEPSS 0.22%Oct 15, 2026
- Medium6.4VK Blocks <= 1.126.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Group Block 'linkToPost' FeatureCheck if you run itEPSS 0.19%Oct 15, 2026
- High7.5Link Library <= 7.9.2 - Unauthenticated SQL Injection via 'link_url' ParameterCheck if you run itEPSS 0.36%Oct 15, 2026
- Medium6.1Tracking Code Manager <= 2.6.0 - Reflected Cross-Site Scripting via 'TCM_ErrorMessages'Check if you run itEPSS 0.21%Oct 15, 2026
- High7.2Mang Board WP <= 2.4.0 - Unauthenticated Stored Cross-Site Scripting via 'data_type' ParameterCheck if you run itEPSS 0.24%Oct 15, 2026
- Medium6.1Photo Gallery by 10Web <= 1.8.42 - Reflected Cross-Site Scripting via 'title' ParameterCheck if you run itEPSS 0.21%Oct 15, 2026
- High7.2Groundhogg <= 4.5.14 - Unauthenticated Stored Cross-Site Scripting via 'ref' ParameterCheck if you run itEPSS 0.29%Oct 15, 2026
- High7.2Premium Packages <= 7.0.5 - Unauthenticated Stored Cross-Site Scripting via 'order_email'Check if you run itEPSS 0.23%Oct 15, 2026
- High8.1Checkout Field Manager (Checkout Manager) for WooCommerce <= 7.9.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Media Deletion via Checkout File Field Attachment IDCheck if you run itEPSS 0.30%Oct 15, 2026
- Medium6.4Import and export users and customers <= 2.4.5 - Authenticated (Custom+) Stored Cross-Site Scripting via User Meta Profile FieldsCheck if you run itEPSS 0.19%Oct 15, 2026
- Medium6.5Ocean Extra <= 2.6.0 - Unauthenticated Arbitrary Shortcode Execution via 'oceanwp_library' Shortcode TemplateCheck if you run itEPSS 0.22%Oct 15, 2026
- Medium6.4Post and Page Builder by BoldGrid <= 1.27.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-label' AttributeCheck if you run itEPSS 0.16%Oct 15, 2026
- Medium5.3A flaw was found in OpenSSH.Check if you run itEPSS 0.30%Oct 15, 2026
- Medium5.4A flaw was found in OpenSSH.Check if you run itEPSS 0.24%Oct 15, 2026
- Medium6.5A flaw was found in OpenSSH.Check if you run itEPSS 0.33%Oct 15, 2026
- High7.0Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability.Check if you run itEPSS 0.14%Oct 15, 2026
- High7.2ZDI-26-770: SonicWall Secure Mobile Access unzip Directory Traversal Remote Code Execution VulnerabilityCheck if you run itEPSS 0.65%Oct 15, 2026
- High7.5ZDI-26-776: QNAP TS-453E syslog log_message Format String Remote Code Execution VulnerabilityCheck if you run itEPSS 4.36%Oct 15, 2026
- Medium5.7A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read.Check if you run itEPSS 0.09%Oct 15, 2026
- Medium4.7A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read.Check if you run itEPSS 0.10%Oct 15, 2026
- High7.1A security vulnerability in HPE NonStop EXPAND may cause out-of-bounds memory read resulting in buffer overflow.Check if you run itEPSS 0.16%Oct 15, 2026
- Medium6.4Kirki <= 6.2.0 - Authenticated (Custom+) Stored Cross-Site Scripting via Page Builder Text ContentCheck if you run itEPSS 0.19%Oct 15, 2026
- Critical9.810Web Booster <= 2.34.10 - Unauthenticated Arbitrary File Upload via 'page_id' ParameterCheck if you run itEPSS 0.92%Oct 15, 2026
- High7.3PhastPress <= 3.10 - Unauthenticated Server-Side Request Forgery via 'src' ParameterCheck if you run itEPSS 0.24%Oct 15, 2026
- Medium6.4A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read/write operationsCheck if you run itEPSS 0.14%Oct 15, 2026