Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Varnish Enterprise before 6.0.16r12 allows a "workspace overflow" denial of service (daemon panic) for shared VCL.Check if you run itEPSS 0.40%Apr 12, 2026
- High7.5Varnish Cache 9 before 9.0.1 and Varnish Enterprise before 6.0.16r11 allows a "workspace overflow" denial of service (daemon panic) for certain amounts of prefetched data.Check if you run itEPSS 0.40%Apr 12, 2026
- High7.1MyT-PM 1.5.1 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the Charg…Check if you run itEPSS 0.28%Apr 12, 2026
- Medium5.3Heatmiser Wifi Thermostat 1.7 contains a cross-site request forgery vulnerability that allows attackers to change administrator credentials by tricking authenticated u…Check if you run itEPSS 0.13%Apr 12, 2026
- High7.1eBrigade ERP 4.5 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the '…Check if you run itEPSS 0.27%Apr 12, 2026
- High8.7Across DR-810 contains an unauthenticated file disclosure vulnerability that allows remote attackers to download the rom-0 backup file containing sensitive information…Check if you run itEPSS 0.53%Apr 12, 2026
- High7.1ImpressCMS 1.3.11 contains a time-based blind SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code thro…Check if you run itEPSS 0.34%Apr 12, 2026
- High8.8CMSsite 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the cat_id parameter.Check if you run itEPSS 0.41%Apr 12, 2026
- High7.1ResourceSpace 8.6 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the…Check if you run itEPSS 0.16%Apr 12, 2026
- Low2.1A vulnerability was identified in AstrBotDevs AstrBot up to 4.22.1.Check if you run itEPSS 0.35%Apr 12, 2026
- Low2.1A security flaw has been discovered in FoundationAgents MetaGPT up to 0.8.1.Check if you run itEPSS 0.37%Apr 12, 2026
- Low2.1A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.1.Check if you run itEPSS 0.29%Apr 12, 2026
- Unknownusememos memos Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 2.93%Apr 12, 2026
- UnknownNETGEAR dgn2200_firmware Improper AuthenticationPatch nowKEVEPSS 2.11%Apr 12, 2026
- High7.1The wpForo Forum plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to and including 3.0.2.Check if you run itEPSS 0.63%Apr 11, 2026
- High7.2The Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all ve…Check if you run itEPSS 0.42%Apr 11, 2026
- Medium5.0The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP plugin for WordPress is vulnerable to blind Server-Side Request F…Check if you run itEPSS 0.45%Apr 11, 2026
- Medium4.3The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.9.7.Check if you run itEPSS 0.34%Apr 11, 2026
- Medium5.4The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthorized private course enrollment in all versions up to, and including, 3.9.7.Check if you run itEPSS 0.39%Apr 11, 2026
- Medium6.3The frontend gRPC server's streaming interceptor chain did not include the authorization interceptor.Check if you run itEPSS 0.66%Apr 10, 2026
- Medium5.3FastGPT is an AI Agent building platform.Check if you run itEPSS 0.44%Apr 10, 2026
- Medium6.5Arcane is an interface for managing Docker containers, images, networks, and volumes.Patch nowKEVEPSS 0.72%Apr 10, 2026
- High8.2Postiz is an AI social media scheduling tool.Check if you run itEPSS 0.52%Apr 10, 2026
- Medium5.3GeoNode versions 4.4.5 and 5.0.2 (and prior within their respective releases) contain a server-side request forgery vulnerability in the service registration endpoint…Check if you run itEPSS 0.27%Apr 10, 2026
- Medium5.3GeoNode versions 4.0 before 4.4.5 and 5.0 before 5.0.2 contain a server-side request forgery vulnerability that allows authenticated users with document upload permiss…Check if you run itEPSS 0.37%Apr 10, 2026