Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownPublished: 2026-07-13 Description Description Severity Notes A Missing Authorization vulnerability was discovered in repositories in BigQuery, Dataform, and Colab Ente…Check if you run itEPSS 0.35%Oct 14, 2026
- UnknownPublished: 2026-08-26 Description Description Severity Notes An Improper Input Validation vulnerability was discovered in the JDBC driver in BigQuery Data Transfer Ser…Check if you run itEPSS 0.45%Oct 14, 2026
- UnknownCVE-2025-35973 is listed by GCP-2026-053.Check if you run itEPSS 0.10%Oct 14, 2026
- UnknownCVE-2025-31938 is listed by GCP-2026-053.Check if you run itEPSS 0.09%Oct 14, 2026
- UnknownCVE-2025-31356 is listed by GCP-2026-053.Check if you run itEPSS 0.07%Oct 14, 2026
- UnknownPublished: 2026-06-25 Description Description Severity Notes A vulnerability was detected in Application Integration's JavaScript task, which was using the Rhino JavaS…Check if you run itEPSS 0.26%Oct 14, 2026
- High8.2A vulnerability in HPE NonStop iTP WebServer can cause memory corruption and system shutdown.Check if you run itEPSS 0.31%Oct 14, 2026
- Critical9.2A vulnerability relating to the exposure of confidential information in the customer invoicing web application, which exposes personally identifiable information (PII)…Check if you run itEPSS 0.33%Oct 14, 2026
- CriticalGitea fork workflow approval bypass through maintainer-triggered eventsCheck if you run itEPSS 0.36%Oct 14, 2026
- MediumGitea issue attachment API allows changing comment attachmentsCheck if you run itEPSS 0.20%Oct 14, 2026
- HighGitea SSRF through Git HTTP redirects in mirrors and fetchesCheck if you run itEPSS 0.26%Oct 14, 2026
- HighGitea fork workflow job revival through later approvalCheck if you run itEPSS 0.33%Oct 14, 2026
- MediumIncorrect Authorization in Kibana Leading to Sensitive Information DisclosureCheck if you run itEPSS 0.31%Oct 14, 2026
- MediumMissing Authorization in Kibana Leading to Information DisclosureCheck if you run itEPSS 0.21%Oct 14, 2026
- HighAuthorization Bypass Through User-Controlled Key in Kibana Leading to Cross-Tenant Data InterceptionCheck if you run itEPSS 0.34%Oct 14, 2026
- High7.5The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 10.3.1 via…Check if you run itEPSS 0.69%Oct 14, 2026
- Medium5.3Missing Authorization vulnerability in 10up Restricted Site Access restricted-site-access allows Exploiting Incorrectly Configured Access Control Security Levels.This…Check if you run itEPSS 0.25%Oct 14, 2026
- High8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Codepeople CP Multi View Event Calendar cp-multi-view-calendar al…Check if you run itEPSS 0.28%Oct 14, 2026
- Medium4.9The Gallery Custom Links plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'display_name (profile.php) + comment (wp-comments-post.php)' parame…Check if you run itEPSS 0.24%Oct 14, 2026
- Medium6.4The Meow Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'display_name + comment' parameter in all versions up to, and including, 5.…Check if you run itEPSS 0.32%Oct 14, 2026
- Medium6.4The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_image…Check if you run itEPSS 0.27%Oct 14, 2026
- High7.2The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'user_name' parameter in all versions up to, and including, 2.4.3 due to insuf…Check if you run itEPSS 0.32%Oct 14, 2026
- Medium6.4The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_title…Check if you run itEPSS 0.26%Oct 14, 2026
- High7.2The Record of Consent Extension for Complianz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'uid' parameter in all versions up to, and incl…Check if you run itEPSS 0.32%Oct 14, 2026
- Medium6.9An Hardcoded Cryptographic Key vulnerability existed in Trellix Agent 5.8.4 via mfecryptc.dll leads to Database Decryption by Regular Users.Check if you run itEPSS 0.12%Oct 14, 2026