Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.3In affected versions of Octopus Server it was possible for a low privileged user to manipulate an API request to change the signing key expiration and revocation time…Check if you run itEPSS 0.26%Mar 17, 2026
- Low2.1A weakness has been identified in frdel/agent0ai agent-zero 0.9.7.Check if you run itEPSS 0.36%Mar 17, 2026
- Low2.0A vulnerability was determined in taoofagi easegen-admin up to 8f87936ac774065b92fb20aab55b274a6ea76433.Check if you run itEPSS 0.39%Mar 16, 2026
- High8.8The script in Use It Flow administration website before 10.0.0 is vulnerable to Remote Code Execution.Check if you run itEPSS 0.63%Mar 16, 2026
- Medium6.1Chamilo LMS is a learning management system.Check if you run itEPSS 0.27%Mar 16, 2026
- High8.8Chamilo LMS is a learning management system.Check if you run itEPSS 0.49%Mar 16, 2026
- High8.5Webhooks for Craft CMS plugin adds the ability to manage “webhooks” in Craft CMS, which will send GET or POST requests when certain events occur.Check if you run itEPSS 0.46%Mar 16, 2026
- Medium5.3An Incorrect Access Control vulnerability exists in INDEX-EDUCATION PRONOTE prior to 2025.2.8.Check if you run itEPSS 0.25%Mar 16, 2026
- High7.4FastMCP is the standard framework for building MCP applications.Check if you run itEPSS 0.37%Mar 16, 2026
- Medium5.1Hereta ETH-IMC408M firmware version 1.0.15 and prior contain a cross-site request forgery vulnerability that allows attackers to modify device configuration by exploit…Check if you run itEPSS 0.17%Mar 16, 2026
- Medium4.3Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to properly enforce read permissions in search API endpoints which allows guest users…Check if you run itEPSS 0.17%Mar 16, 2026
- Medium4.3Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to validate team-specific upload_file permissions which allows a guest user to post fi…Check if you run itEPSS 0.38%Mar 16, 2026
- Medium5.5A vulnerability was found in vanna-ai vanna up to 2.0.2.Check if you run itEPSS 0.49%Mar 16, 2026
- Low2.1A security flaw has been discovered in FlowCI flow-core-x up to 1.23.01.Check if you run itEPSS 0.36%Mar 16, 2026
- Medium5.5A security flaw has been discovered in glowxq glowxq-oj up to 6f7c723090472057252040fd2bbbdaa1b5ed2393.Check if you run itEPSS 0.49%Mar 16, 2026
- High7.3A vulnerability was detected in TRENDnet TEW-632BRP 1.010B32.Check if you run itEPSS 0.88%Mar 16, 2026
- High8.9A weakness has been identified in Topsec TopACM 3.0.Check if you run itEPSS 4.49%Mar 16, 2026
- High8.9A flaw has been found in Wavlink WL-WN578W2 221110.Check if you run itEPSS 3.71%Mar 16, 2026
- High8.9A vulnerability was detected in Wavlink WL-WN579A3 220323.Check if you run itEPSS 3.71%Mar 16, 2026
- High7.3Unraid Authentication Request Path Traversal Authentication Bypass Vulnerability.Check if you run itEPSS 0.88%Mar 16, 2026
- High8.8Unraid Update Request Path Traversal Remote Code Execution Vulnerability.Check if you run itEPSS 1.44%Mar 16, 2026
- High8.0Philips Hue Bridge hk_hap characteristics Heap-based Buffer Overflow Remote Code Execution Vulnerability.Check if you run itEPSS 0.73%Mar 16, 2026
- Medium5.3Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma web application, specifically in the endpoint 'vets.wakyma.com/pets/print-tags'.Check if you run itEPSS 0.45%Mar 16, 2026
- High7.1Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma web application, specifically in the endpoint 'vets.wakyma.com/hospitalization/generate-hospitalization-summary'.Check if you run itEPSS 0.38%Mar 16, 2026
- High7.1Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma web application, specifically in the endpoint 'vets.wakyma.com/centro/equipo/empleado'.Check if you run itEPSS 0.38%Mar 16, 2026