Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1Cross-Site Request Forgery vulnerability allows an attacker to perform unauthorized actions via crafted web page.Check if you run itEPSS 0.18%May 12, 2026
- Medium5.4An insecure direct object reference in MK-Auth 23.01K4.9 allows attackers to access and send support calls for other users via manipulation of the chamado parameter th…Check if you run itEPSS 0.17%May 12, 2026
- Medium6.5LWP::UserAgent versions before 6.83 for Perl leak Authorization and Proxy-Authorization headers on cross-origin redirects.Check if you run itEPSS 0.41%May 12, 2026
- High8.1YetAnotherForum.NET (YAF.NET) is a C# ASP.NET forum.Check if you run itEPSS 0.38%May 12, 2026
- Low2.1Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.30%May 12, 2026
- High7.5multiparty@4.2.3 and lower versions are vulnerable to denial of service via uncaught exception.Check if you run itEPSS 0.58%May 12, 2026
- High7.5multiparty@4.2.3 and lower versions are vulnerable to denial of service via uncaught exception.Check if you run itEPSS 0.53%May 12, 2026
- High8.7The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests.Check if you run itEPSS 0.32%May 12, 2026
- Medium4.3The Zawgyi Embed plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.1.Check if you run itEPSS 0.19%May 12, 2026
- Medium4.3The WP-Redirection plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 1.0.3.Check if you run itEPSS 0.20%May 12, 2026
- Medium6.1The Tm – WordPress Redirection plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.Check if you run itEPSS 0.18%May 12, 2026
- Medium4.3The Woo Commerce Minimum Weight plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 3.0.1.Check if you run itEPSS 0.20%May 12, 2026
- Medium4.3The Skysa Text Ticker App plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.Check if you run itEPSS 0.19%May 12, 2026
- Medium4.3The Coinbase Commerce for Contact Form 7 plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 1.1.2.Check if you run itEPSS 0.36%May 12, 2026
- Medium5.3The HEL Online Classroom: AI-powered Online Classrooms plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0.3.Check if you run itEPSS 0.54%May 12, 2026
- Medium6.5webpack-dev-server versions up to and including 5.2.3 are vulnerable to cross-origin source code exposure when serving over a non-potentially trustworthy origin such as plain HTTP.Check if you run itEPSS 0.35%May 12, 2026
- Medium6.1Issuing an ICMP ping via the shell command to a device's own IPv4 address causes the network stack to recursively re-enter the input path on the same system work-queue…Check if you run itEPSS 0.14%May 12, 2026
- High7.5** UNSUPPORTED WHEN ASSIGNED ** A buffer overflow vulnerability in the formWep(), formWlAc(), formPasswordSetup(), formUpgradeCert(), and formDelcert() functions of th…Check if you run itEPSS 0.55%May 12, 2026
- High8.8** UNSUPPORTED WHEN ASSIGNED ** A command injection vulnerability in the CGI program of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 could allow an adjacent attac…Check if you run itEPSS 2.69%May 12, 2026
- Medium5.4Due to insufficient CSRF protection in SAP BusinessObjects Business Intelligence Platform ,an authenticated user could be tricked by an attacker to send unintended req…Check if you run itEPSS 0.12%May 12, 2026
- Medium5.3Fiber is a web framework for Go.Check if you run itEPSS 0.31%May 11, 2026
- Medium6.5HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP request lines or control field header values.Check if you run itEPSS 0.36%May 11, 2026
- High7.7Outline is a service that allows for collaborative documentation.Check if you run itEPSS 0.34%May 11, 2026
- High8.2Outline is a service that allows for collaborative documentation.Check if you run itEPSS 0.30%May 11, 2026
- Medium5.3WWBN AVideo is an open source video platform.Check if you run itEPSS 0.33%May 11, 2026