Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8DedeCMS v5.7.118 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability in /sys_task_add.php.Check if you run itEPSS 0.22%Mar 24, 2026
- High7.5ipmi-oem in FreeIPMI before 1.6.17 has exploitable buffer overflows on response messages.Check if you run itEPSS 0.42%Mar 24, 2026
- High8.1Vikunja is an open-source self-hosted task management platform.Check if you run itEPSS 0.46%Mar 24, 2026
- Medium6.5ConcreteCMS v9.4.7 contains a Denial of Service (DoS) vulnerability in the File Manager component.Check if you run itEPSS 0.46%Mar 24, 2026
- Medium6.3NGINX Plus and NGINX Open Source have a vulnerability in the ngx_mail_smtp_module module due to the improper handling of CRLF sequences in DNS responses.Check if you run itEPSS 0.27%Mar 24, 2026
- High8.7When the ngx_mail_auth_http_module module is enabled on NGINX Plus or NGINX Open Source, undisclosed requests can cause worker processes to terminate.Check if you run itEPSS 1.71%Mar 24, 2026
- High7.5Langflow is a tool for building and deploying AI-powered agents and workflows.Check if you run itEPSS 0.58%Mar 24, 2026
- Critical9.1Langflow is a tool for building and deploying AI-powered agents and workflows.Check if you run itEPSS 2.17%Mar 24, 2026
- High8.8eNdonesia Portal v8.7 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code…Check if you run itEPSS 0.35%Mar 24, 2026
- High8.8Netartmedia Vlog System contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the…Check if you run itEPSS 0.27%Mar 24, 2026
- High8.8Inout Article Base CMS contains SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries through the 'p' and 'u' parameters.Check if you run itEPSS 0.34%Mar 24, 2026
- High7.1Meeplace Business Review Script contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious c…Check if you run itEPSS 0.30%Mar 24, 2026
- High8.8Zeeways Jobsite CMS contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'id'…Check if you run itEPSS 0.33%Mar 24, 2026
- Medium6.9phpFileManager 1.7.8 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the action, fm_current…Check if you run itEPSS 0.57%Mar 24, 2026
- High8.7PhreeBooks ERP 5.2.3 contains an arbitrary file upload vulnerability in the Image Manager component that allows authenticated attackers to upload malicious files by su…Check if you run itEPSS 0.91%Mar 24, 2026
- Critical9.1The WP DSGVO Tools (GDPR) plugin for WordPress is vulnerable to unauthorized account destruction in all versions up to, and including, 3.1.38.Check if you run itEPSS 0.75%Mar 24, 2026
- Medium6.5The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to unauthorized data loss due to a missing capability check in all versions up to, and inc…Check if you run itEPSS 0.50%Mar 24, 2026
- Low2.9Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in visualfc liteide (liteidex/src/3rdparty/qjsonrpc/src/http-parser modules).Check if you run itEPSS 0.34%Mar 24, 2026
- Medium5.5A security vulnerability has been detected in DefaultFuction Jeson-Customer-Relationship-Management-System up to 1b4679c4d06b90d31dd521c2b000bfdec5a36e00.Check if you run itEPSS 0.53%Mar 24, 2026
- High8.6Vulnerability in Spring Cloud when substituting the profile parameter from a request made to the Spring Cloud Config Server configured to the native file system as a b…Check if you run itEPSS 1.22%Mar 24, 2026
- High7.5Ella Core is a 5G core designed for private networks.Check if you run itEPSS 0.52%Mar 24, 2026
- Medium6.5The Go MCP SDK used Go's standard encoding/json.Check if you run itEPSS 0.22%Mar 24, 2026
- High8.7Salvo is a Rust web framework.Check if you run itEPSS 0.53%Mar 24, 2026
- Medium6.6Active Storage allows users to attach cloud and local files in Rails applications.Check if you run itEPSS 0.62%Mar 24, 2026
- UnknownQualitor qualitor Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 14.31%Mar 24, 2026