Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Incorrect Privilege Assignment vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Privilege Escalation.This issue affects Fluent CRM: from n/a through 3.2.5.Check if you run itEPSS 0.29%Oct 15, 2026
- Criticalipv4: free inet_opt and ireq_opt after an RCU grace periodCheck if you run itEPSS 0.17%Oct 15, 2026
- High7.3A vulnerability in HPE NonStop SQL/MX UDR SERVER may allow a crafted message to cause process termination, service disruption or memory corruption, resulting in undefined behavior.Check if you run itEPSS 0.10%Oct 15, 2026
- Medium6.5In versions till , The default rate-limit key resolver, , derives the per-client bucket key from the leftmost element of the request header.Check if you run itEPSS 0.19%Oct 15, 2026
- Medium6.4HPE NonStop SQL/MX Run-Time Statistics - Information disclosure and DoS vulnerabilityCheck if you run itEPSS 0.17%Oct 15, 2026
- Medium5.4WholesaleX <= 3.0.8 - Unauthenticated Limited Privilege Escalation via 'process_registration'Check if you run itEPSS 0.18%Oct 15, 2026
- Low2.8A crafted input message can cause a buffer overflow in HPE Nonstop KMS Server.Check if you run itEPSS 0.09%Oct 15, 2026
- High7.4A security vulnerability in HPE NonStop SQL/MX SQLCAT may allow an unauthenticated user to perform unauthorized command execution.Check if you run itEPSS 0.57%Oct 15, 2026
- Critical9.3Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TMS Amelia ameliabooking allows SQL Injection.This issue affects…Check if you run itEPSS 0.24%Oct 15, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Everest Forms Everest Forms everest-forms allows Stored XSS.This…Check if you run itEPSS 0.15%Oct 15, 2026
- High7.5A vulnerability in HPE NonStop ANSI SQLUTIL may allow a remote unauthenticated actor to cause an affected service to terminate unexpectedly, causing a denial of service.Check if you run itEPSS 0.26%Oct 15, 2026
- High7.5WordPress FluentCart plugin <= 1.7.1 - Sensitive Data Exposure vulnerabilityCheck if you run itEPSS 0.24%Oct 15, 2026
- Critical9.8Incorrect Privilege Assignment vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Privilege Escalation.This issue affects Fluent CRM: from n/a through 3.2.5.Check if you run itEPSS 0.27%Oct 15, 2026
- High7.1WordPress BSK PDF Manager plugin <= 3.8.1 - Cross Site Scripting (XSS) vulnerabilityCheck if you run itEPSS 0.15%Oct 15, 2026
- High7.6A stack buffer overflow vulnerability in HPE NonStop SQL/MX Executor may potentially result in information disclosure or process crash.Check if you run itEPSS 0.19%Oct 15, 2026
- Medium6.6A heap buffer overflow in HPE NonStop Posix User Threads may allow arbitrary code execution.Check if you run itEPSS 0.11%Oct 15, 2026
- Medium6.6A vulnerability in HPE NonStop Kernel Level Thread Model Lib can cause stack buffer overflow which can allow arbitrary code execution.Check if you run itEPSS 0.11%Oct 15, 2026
- Medium5.2Incomplete cleanup vulnerability in ABB My Control System.Check if you run itEPSS 0.14%Oct 15, 2026
- High8.2A security vulnerability in HPE NonStop HTTP WEBSERVER can cause memory corruption which may result in a system halt.Check if you run itEPSS 0.40%Oct 15, 2026
- High7.1A heap buffer overflow in HPE NonStop Debug Utilities could corrupt resume-execution address and may potentially redirect execution flow.Check if you run itEPSS 0.15%Oct 15, 2026
- High7.1A heap buffer overflow in HPE NonStop Inspect Subsystem could corrupt resume-execution address and may potentially redirect execution flow.Check if you run itEPSS 0.15%Oct 15, 2026
- Medium6.9Unauthenticated authorization bypass in ConstraintSecurityHandler - HTTP method-omission matched by substringCheck if you run itEPSS 0.43%Oct 15, 2026
- Medium6.9In Eclipse Jetty, across various versions of , and , two or more security constraints with the same http-method-omission set, and no url-patterns, are not combined properly per JakCheck if you run itEPSS 0.40%Oct 15, 2026
- Medium5.6Eclipse Jetty's retains authentication credentials in a serializable object.Check if you run itEPSS 0.13%Oct 15, 2026
- Critical9.3An unauthenticated client may access certain protected resources when using EthereumAuthenticator if the request path contains the configured login path.Check if you run itEPSS 0.54%Oct 15, 2026