Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3A flaw was found in Keycloak.Check if you run itEPSS 0.87%Mar 18, 2026
- Medium5.3The Subscriptions for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the function in all vers…Check if you run itEPSS 0.32%Mar 18, 2026
- Medium6.3Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 0.55%Mar 18, 2026
- Medium6.9Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 0.87%Mar 18, 2026
- Medium5.3Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 0.24%Mar 18, 2026
- High7.5IBM Sterling B2B Integrator and and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1, and 6.2.2.0 could allow…Check if you run itEPSS 0.35%Mar 17, 2026
- Medium5.1Edimax GS-5008PL firmware version 1.00.54 and prior contain a stored cross-site scripting vulnerability in the system_name_set.cgi script that allows attackers to inje…Check if you run itEPSS 0.30%Mar 17, 2026
- Medium5.1Edimax GS-5008PL firmware version 1.00.54 and prior contain a cross-site request forgery vulnerability that allows remote attackers to perform unauthorized administrat…Check if you run itEPSS 0.24%Mar 17, 2026
- High8.3Missing authorization checks on multiple gRPC service endpoints in PowerShell Universal before 2026.1.4 allows an authenticated user with any valid token to bypass rol…Check if you run itEPSS 0.39%Mar 17, 2026
- Medium5.5Improper input validation in the apps and endpoints configuration in PowerShell Universal before 2026.1.4 allows an authenticated user with permissions to create or mo…Check if you run itEPSS 0.41%Mar 17, 2026
- High7.5Wazuh is a free and open source platform used for threat prevention, detection, and response.Check if you run itEPSS 0.72%Mar 17, 2026
- High8.8Sipeed NanoKVM before 2.3.1 exposes a Wi-Fi configuration endpoint without proper security checks, allowing an unauthenticated attacker with network access to change t…Check if you run itEPSS 0.56%Mar 17, 2026
- Critical9.3JetKVM before 0.5.4 does not rate limit login requests, enabling brute-force attempts to guess credentials.Check if you run itEPSS 0.53%Mar 17, 2026
- Critical9.3The GL-iNet Comet (GL-RM1) KVM web interface does not limit login requests, enabling brute-force attempts to guess credentials.Check if you run itEPSS 0.57%Mar 17, 2026
- Medium6.1HTML Injection can be carried out in Product when a web application does not properly check or clean user input before showing it on a webpage.Check if you run itEPSS 0.16%Mar 17, 2026
- High7.5A flaw was found in libsoup, a library for handling HTTP requests.Check if you run itEPSS 0.86%Mar 17, 2026
- Low2.7HCL Sametime is vulnerable to broken server-side validation.Check if you run itEPSS 0.20%Mar 17, 2026
- High7.5Apache Airflow versions 3.1.0 through 3.1.7 session token (_token) in cookies is set to path=/ regardless of the configured [webserver] base_url or [api] base_url.Check if you run itEPSS 0.78%Mar 17, 2026
- Medium6.5Apache Airflow versions 3.0.0 through 3.1.7 FastAPI DagVersion listing API does not apply per-DAG authorization filtering when the request is made with dag_id set to "…Check if you run itEPSS 0.64%Mar 17, 2026
- Medium6.5A flaw was found in libsoup.Check if you run itEPSS 0.39%Mar 17, 2026
- Medium5.5A flaw was found in libsoup, a library used by applications to send network requests.Check if you run itEPSS 0.36%Mar 17, 2026
- Low2.3In affected versions of Octopus Server it was possible for a low privileged user to manipulate an API request to change the signing key expiration and revocation time…Check if you run itEPSS 0.26%Mar 17, 2026
- Low2.1A weakness has been identified in frdel/agent0ai agent-zero 0.9.7.Check if you run itEPSS 0.36%Mar 17, 2026
- Low2.0A vulnerability was determined in taoofagi easegen-admin up to 8f87936ac774065b92fb20aab55b274a6ea76433.Check if you run itEPSS 0.39%Mar 16, 2026
- High8.8The script in Use It Flow administration website before 10.0.0 is vulnerable to Remote Code Execution.Check if you run itEPSS 0.63%Mar 16, 2026