Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3MessagePack: Nested arrays can blow past buffer length limitsCheck if you run itEPSS 0.65%Oct 15, 2026
- Unknownninjaforms ninja_forms Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.35%Oct 15, 2026
- Critical9.8The Theme My Login plugin for WordPress is vulnerable to privilege escalation via account takeover in versions up to, and including, 7.2.1.Patch nowKEVEPSS 0.29%Oct 15, 2026
- UnknownA Regular-Expression Denial of Service (ReDoS) in the Markdown2.Check if you run itEPSS 0.15%Oct 15, 2026
- UnknownNginx UI: OTP secure-session step-up can be bypassed via MCP configuration toolsCheck if you run itEPSS 0.35%Oct 15, 2026
- UnknownNginx UI: Standalone short tokens survive administrative revocation in cache and authenticate again after account re-enableCheck if you run itEPSS 0.21%Oct 15, 2026
- UnknownNginx UI: MCP Bypasses Directive Validation — Authenticated RCECheck if you run itEPSS 0.62%Oct 15, 2026
- UnknownNginx UI: MCP nginx_config_add skips config directive validation → authenticated nginx directive injection (RCE on the official image)Check if you run itEPSS 0.38%Oct 15, 2026
- UnknownNginx UI: nginx config directive denylist (ValidateConfigFile) is bypassable via same-line ";" separation → authenticated directive injection (RCE on the official image)Check if you run itEPSS 0.40%Oct 15, 2026
- UnknownNginx UI: Account Takeover via Missing on User Management EndpointCheck if you run itEPSS 0.33%Oct 15, 2026
- High7.7FrankenPHP: Cross-request PHP session ID leak in worker mode when the session extension is a shared moduleCheck if you run itEPSS 0.23%Oct 15, 2026
- Medium6.5SFTPGo: Denial of service via malformed SSH channel requestCheck if you run itEPSS 0.31%Oct 15, 2026
- High7.1Document Gallery <= 5.1.1 - Reflected XSS via data-shortcode AttributePatch nowKEVEPSS 0.15%Oct 15, 2026
- LowGitHub CLI allows attestation verification bypass through unescaped regex metacharactersCheck if you run itEPSS 0.34%Oct 15, 2026
- LowGitHub CLI allows path traversal through unescaped request URL componentsCheck if you run itEPSS 0.51%Oct 15, 2026
- Low3.3GitHub CLI partially discloses authentication tokens in outputCheck if you run itEPSS 0.15%Oct 15, 2026
- Medium6.5Python Social Auth is a social authentication/registration mechanism.Check if you run itEPSS 0.15%Oct 15, 2026
- UnknownA stack overflow in the gensub_ParsePsb() function of AOC LC32D1320 v2.05 allows attackers to cause a Denial of Service (DoS) via supplying a crafted .PSB subtitle file.Check if you run itEPSS 0.17%Oct 15, 2026
- High7.5An issue in Trisolutions BRPerfX version 1.4.4.0 exposes LDAP credentials in plaintext within the administrative configuration interface.Check if you run itEPSS 0.34%Oct 15, 2026
- UnknownExternal Control of File Name or PathPatch nowKEVEPSS 0.37%Oct 15, 2026
- High8.8XXL-JOB 3.5.0-SNAPSHOT and earlier contains a Cross-Site Request Forgery (CSRF) vulnerability in the user management controller (JobUserController).Check if you run itEPSS 0.30%Oct 15, 2026
- High8.8ELADMIN v2.7 and earlier contains an improper access control vulnerability in the user-management endpoint PUT /api/users/resetPwd of me.zhengjie.modules.system.rest.U…Check if you run itEPSS 0.30%Oct 15, 2026
- High7.5react/http is an event-driven, streaming HTTP client and server implementation for ReactPHP.Check if you run itEPSS 0.43%Oct 15, 2026
- UnknownAUTOM8N (WHM/cPanel plugin) through commit 82821f7 contains an OS Command Injection in borg_restore.cgi.Check if you run itEPSS 0.76%Oct 15, 2026
- Medium6.5tinytag is a Python library for reading audio file metadata.Check if you run itEPSS 0.25%Oct 15, 2026