Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields.Check if you run itEPSS 0.94%Oct 13, 2026
- High7.0VNote is a note-taking platform.Check if you run itEPSS 0.14%Oct 13, 2026
- Critical9.8The Printcart Store (PCDesigner / NB Designer) plugin for WooCommerce is vulnerable to unauthenticated arbitrary file upload leading to remote code execution in all ve…Check if you run itEPSS 0.85%Oct 13, 2026
- Critical9.1The Click to Chat for WhatsApp plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to, and including, 4.44 This is due to the greetings_…Check if you run itEPSS 0.53%Oct 13, 2026
- Medium4.3Internal Application Information Exposure Vulnerability in Hitachi Ops Center Administrator.Check if you run itEPSS 0.23%Oct 13, 2026
- Medium5.1Out-of-bounds write vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array Driver for Virtual I/O Server.Check if you run itEPSS 0.13%Oct 13, 2026
- High7.9Insecure Temporary File vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array Driver for Virtual I/O Server.Check if you run itEPSS 0.12%Oct 13, 2026
- High8.1The Directorist: AI-Powered Business Directory, Listings & Classified Ads plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 8.10.2.1.Check if you run itEPSS 0.54%Oct 13, 2026
- Critical9.8Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Samsung Open Source QA-Board allows : OS Command Injection.Check if you run itEPSS 1.24%Oct 13, 2026
- Medium5.3The Database Addon for Contact Form 7 – CFDB7 plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to, and including, 1.4.1.Check if you run itEPSS 0.31%Oct 13, 2026
- High8.1The BP Profile Search plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 5.9 via the 'ajax_template' value parsed from the cl…Check if you run itEPSS 0.85%Oct 13, 2026
- High7.5The Membership & User Roles for WooCommerce (Automatic Role Changer) plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 20260828.Check if you run itEPSS 0.34%Oct 13, 2026
- High7.5The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress is vulnerable to Privilege Escalation via Log Re-execu…Check if you run itEPSS 0.54%Oct 13, 2026
- Medium6.4The Booking Package plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter in all versions up to, and including, 1.7.29 due to insuff…Check if you run itEPSS 0.26%Oct 13, 2026
- High7.5The Booking Package plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.7.29 This is due to the plugin not properly veri…Check if you run itEPSS 0.53%Oct 13, 2026
- High7.5Claude Code: Plugin Hash Pin Bypass Allows Bypass of Hash PinningCheck if you run itEPSS 0.17%Oct 13, 2026
- High8.8Microsoft Office OneNote Remote Code Execution VulnerabilityCheck if you run itEPSS 0.76%Oct 13, 2026
- High7.5.NET Framework Tampering VulnerabilityCheck if you run itEPSS 0.61%Oct 13, 2026
- Medium6.5Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.Check if you run itEPSS 0.73%Oct 13, 2026
- Medium6.5Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.Check if you run itEPSS 0.73%Oct 13, 2026
- Medium6.5Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.Check if you run itEPSS 0.73%Oct 13, 2026
- Medium6.5Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.Check if you run itEPSS 0.73%Oct 13, 2026
- Medium6.5Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.Check if you run itEPSS 0.73%Oct 13, 2026
- Medium6.5Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.Check if you run itEPSS 0.73%Oct 13, 2026
- Medium6.5Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.Check if you run itEPSS 0.73%Oct 13, 2026