Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.1A security vulnerability has been detected in Telegram Desktop up to 6.7.5.Check if you run itEPSS 0.51%May 3, 2026
- Medium6.5During the analysis, it was identified that authenticated attackers with Subscriber-level access or higher are able to perform an Insecure Direct Object Reference (IDOR) attack.Check if you run itEPSS 0.34%May 3, 2026
- Medium5.3Starlet versions through 0.31 for Perl allows HTTP Request Smuggling via Improper Header Precedence.Check if you run itEPSS 0.43%May 3, 2026
- Low2.1A flaw has been found in kleneway awesome-cursor-mpc-server up to 2.0.1.Check if you run itEPSS 1.82%May 2, 2026
- Low2.1A vulnerability was detected in crazyrabbitLTC mcp-code-review-server up to 0.1.0.Check if you run itEPSS 1.82%May 2, 2026
- Low2.1A security vulnerability has been detected in 8nite metatrader-4-mcp 1.0.0.Check if you run itEPSS 0.40%May 2, 2026
- Medium5.3The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Improper Authorization in all versions up to, and including, 2.1.2.Check if you run itEPSS 0.42%May 2, 2026
- High7.2The Royal Elementor Addons plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including, 1.7.1057.Check if you run itEPSS 0.48%May 2, 2026
- Low2.1A security flaw has been discovered in JeecgBoot up to 3.9.1.Check if you run itEPSS 0.37%May 2, 2026
- High8.1The Profile Builder Pro plugin for WordPress is vulnerable to PHP Object Injection in all versions up to and including 3.14.5.Check if you run itEPSS 0.62%May 2, 2026
- High7.2The PixelYourSite Pro – Your smart PIXEL (TAG) Manager plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 12.5.0.1…Check if you run itEPSS 0.50%May 2, 2026
- Medium4.4The Ona theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.26 via the ona_activate_child_theme.Check if you run itEPSS 0.32%May 2, 2026
- Low2.1A vulnerability was identified in JeecgBoot up to 3.9.1.Check if you run itEPSS 0.37%May 2, 2026
- Low2.1A vulnerability was determined in JeecgBoot up to 3.9.1.Check if you run itEPSS 0.37%May 2, 2026
- Medium5.3The App Builder – Create Native Android & iOS Apps On The Flight plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to and including 5.6.0.Check if you run itEPSS 0.51%May 2, 2026
- Low2.1A vulnerability has been found in nextlevelbuilder ui-ux-pro-max-skill up to 2.5.0.Check if you run itEPSS 0.47%May 1, 2026
- Low2.1A flaw has been found in nextlevelbuilder ui-ux-pro-max-skill up to 2.5.0.Check if you run itEPSS 0.41%May 1, 2026
- Medium6.3Reliance on Untrusted Inputs in a Security Decision vulnerability in mtrudel bandit allows unauthenticated transport-state spoofing on plaintext HTTP connections.Check if you run itEPSS 0.52%May 1, 2026
- Medium6.3Inconsistent Interpretation of HTTP Requests vulnerability in mtrudel bandit allows HTTP request smuggling via duplicate Content-Length headers.Check if you run itEPSS 0.55%May 1, 2026
- Low2.1A security flaw has been discovered in TimBroddin astro-mcp-server up to 1.1.1.Check if you run itEPSS 0.32%May 1, 2026
- Medium6.5A Command Injection vulnerability in the web management interface in Aver PTC320UV2 0.1.0000.65 allows an unauthenticated attacker to execute arbitrary commands via a…Check if you run itEPSS 1.46%May 1, 2026
- High7.5AGL agl-service-can-low-level contains a stack buffer overflow in the uds-c library.Check if you run itEPSS 0.53%May 1, 2026
- High8.8miaofng/uds-c commit e506334e270d77b20c0bc259ac6c7d8c9b702b7a (2016-10-05) contains a stack buffer overflow in send_diagnostic_request.Check if you run itEPSS 0.41%May 1, 2026
- High7.5AGL agl-service-can-low-level thru 17.1.12 contains a stack buffer overflow in the uds-c library.Check if you run itEPSS 0.53%May 1, 2026
- High7.8AGL app-framework-binder (afb-daemon) through v19.90.0 contains a privilege escalation vulnerability in the supervision Do command.Check if you run itEPSS 0.16%May 1, 2026