Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.6Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases.Check if you run itEPSS 0.50%May 20, 2026
- Medium5.1Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in search.php that allows authenticated attackers to inject arbitrary JavaScrip…Check if you run itEPSS 0.29%May 20, 2026
- Medium4.1ArcGIS Server contains an input validation weakness in the login redirection workflow.Check if you run itEPSS 0.32%May 20, 2026
- Medium5.3ArcGIS Server contains an improper authentication vulnerability in an undocumented administrative endpoint.Check if you run itEPSS 0.38%May 20, 2026
- High8.8Cross-Site Request Forgery (CSRF) vulnerability in InfoScale v.9.1.3 Operations Manager (VIOM) allows an attacker to force the user with an active session into clickin…Check if you run itEPSS 0.22%May 20, 2026
- Critical10.0A vulnerability in the access validation of internal REST APIs of Cisco Secure Workload could allow an unauthenticated, remote attacker to access site resources with t…Check if you run itEPSS 0.83%May 20, 2026
- Low2.3Authorization Bypass Through User-Controlled Key vulnerability in phenixdigital phoenix_storybook allows cross-session PubSub topic injection via a URL query parameter.Check if you run itEPSS 0.53%May 20, 2026
- High7.5Multiple flaws have been identified in related to the handling of DNS messages whose CLASS is not Internet ( ) — for example, or , or DNS messages that specify meta-cl…Check if you run itEPSS 1.70%May 20, 2026
- High8.0Cross-Site request forgery (CSRF) vulnerability in Sitemio Information Technologies Trade Ltd.Check if you run itEPSS 0.17%May 20, 2026
- Low2.3Insufficient Verification of Data Authenticity in the feedback function of Mesalvo MEONA (MEONA Client and MEONA Server).Check if you run itEPSS 0.09%May 20, 2026
- High7.5A flaw was found in 389-ds-base.Check if you run itEPSS 0.81%May 20, 2026
- Medium4.3The Anomify AI – Anomaly Detection and Alerting plugin for WordPress is vulnerable to Cross-Site Request Forgery (CSRF) leading to Stored Cross-Site Scripting (XSS) in…Check if you run itEPSS 0.20%May 20, 2026
- Medium4.3The TypeSquare Webfonts for ConoHa plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.0.4.Check if you run itEPSS 0.40%May 20, 2026
- Medium4.3The Remove Yellow BGBOX plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.Check if you run itEPSS 0.19%May 20, 2026
- Medium4.3The JaviBola Custom Theme Test plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.5.Check if you run itEPSS 0.20%May 20, 2026
- Medium6.1The BLOGCHAT Chat System plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.6.3.Check if you run itEPSS 0.21%May 20, 2026
- Medium4.3The Amazon Scraper plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.Check if you run itEPSS 0.23%May 20, 2026
- Medium4.3The Games Catalog plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.0.Check if you run itEPSS 0.20%May 20, 2026
- Medium4.3The Bigfishgames Syndicate plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.Check if you run itEPSS 0.19%May 20, 2026
- Medium4.3The Bottom Bar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 0.1.7.Check if you run itEPSS 0.22%May 20, 2026
- Medium4.3The Child Height Predictor by Ostheimer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 1.3.Check if you run itEPSS 0.20%May 20, 2026
- Medium6.1The Word 2 Cash plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to Stored Cross-Site Scripting in versions up to and including 0.9.2.Check if you run itEPSS 0.18%May 20, 2026
- Medium5.4The Nexa Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Server-Side Request Forgery (SSRF) in versions up to…Check if you run itEPSS 0.41%May 20, 2026
- Medium6.1The Sentence To SEO (keywords, description and tags) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.Check if you run itEPSS 0.21%May 20, 2026
- Medium6.4The 診断ジェネレータ作成プラグイン (Diagnosis Generator) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'js' parameter in versions up to and including 1.4.16.Check if you run itEPSS 0.41%May 20, 2026