Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.3In Splunk Enterprise versions below 10.2.0, 10.0.3, 9.4.9, and 9.3.9, and Splunk Cloud Platform versions below 10.2.2510.4, 10.1.2507.15, 10.0.2503.11, and 9.3.2411.12…Check if you run itEPSS 0.21%Mar 11, 2026
- Critical9.8A remote code execution (RCE) vulnerability in OpenClaw Agent Platform v2026.2.6 allows attackers to execute arbitrary code via a Request-Side prompt injection attack.Check if you run itEPSS 1.23%Mar 11, 2026
- High7.5Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes.Check if you run itEPSS 0.81%Mar 11, 2026
- High7.5An issue pertaining to CWE-918: Server-Side Request Forgery was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.Check if you run itEPSS 0.28%Mar 11, 2026
- High7.5When doing a second SMB request to the same host again, curl would wrongly use a data pointer pointing into already freed memory.Check if you run itEPSS 0.99%Mar 11, 2026
- Medium6.5curl would wrongly reuse an existing HTTP proxy connection doing CONNECT to a server, even if the new request uses different credentials for the HTTP proxy.Check if you run itEPSS 0.47%Mar 11, 2026
- Medium5.3When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer performs a redirect to a second URL, curl could leak that token to the second hostname under some cirCheck if you run itEPSS 0.53%Mar 11, 2026
- Medium6.5libcurl can in some circumstances reuse the wrong connection when asked to do an Negotiate-authenticated HTTP or HTTPS request.Check if you run itEPSS 0.26%Mar 11, 2026
- Medium4.3The Modular DS: Monitor, update, and backup multiple websites plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.5.1.Check if you run itEPSS 0.15%Mar 11, 2026
- High7.5The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to blind SQL Injection in all versions up to, and inc…Check if you run itEPSS 0.41%Mar 11, 2026
- Medium6.4The weForms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the REST API entry submission endpoint in all versions up to, and including, 1.6.27.Check if you run itEPSS 0.39%Mar 11, 2026
- High8.1The ProfilePress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.16.11.Check if you run itEPSS 0.52%Mar 11, 2026
- Medium5.5Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerabilit…Check if you run itEPSS 0.24%Mar 11, 2026
- Medium5.5Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerabilit…Check if you run itEPSS 0.24%Mar 11, 2026
- Medium6.1The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.2.7.Check if you run itEPSS 0.10%Mar 11, 2026
- Medium5.0GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.11 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an au…Check if you run itEPSS 0.33%Mar 11, 2026
- High7.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.9 before 18.9.2 that could have allowed an unauthenticated user to cause a denial of serv…Check if you run itEPSS 0.41%Mar 11, 2026
- Medium4.3GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.6 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an au…Check if you run itEPSS 0.25%Mar 11, 2026
- UnknownTenda ac6_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 3.29%Mar 11, 2026
- High7.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.0 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an un…Check if you run itEPSS 0.53%Mar 11, 2026
- Unknownlollms lollms-webui Path Traversal: '\..\filename'Patch nowKEVEPSS 0.67%Mar 11, 2026
- UnknownTenda hg6_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 19.95%Mar 11, 2026
- UnknownASUS asuswrt Missing AuthorizationPatch nowKEVEPSS 85.16%Mar 11, 2026
- Medium6.9Istio is an open platform to connect, manage, and secure microservices.Check if you run itEPSS 0.37%Mar 10, 2026
- High8.7Istio is an open platform to connect, manage, and secure microservices.Check if you run itEPSS 0.70%Mar 10, 2026
Sort