Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5A low‑privileged remote attacker can directly interact with the wwwdnload.cgi endpoint to download any resource available to administrators, including system backups a…Check if you run itEPSS 0.25%Mar 9, 2026
- Low2.0A vulnerability was detected in Comfast CF-AC100 2.6.0.8.Check this weekEPSS 11.34%Mar 9, 2026
- Low2.1A vulnerability was detected in Bytedesk up to 1.3.9.Check if you run itEPSS 0.70%Mar 9, 2026
- Low2.1A security vulnerability has been detected in Bytedesk up to 1.3.9.Check if you run itEPSS 0.71%Mar 9, 2026
- Critical9.8The Tutor LMS Pro plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 3.9.5 via the Social Login addon.Patch nowKEVEPSS 0.67%Mar 9, 2026
- Low2.1A security flaw has been discovered in EasyCMS up to 1.6.Check if you run itEPSS 0.50%Mar 8, 2026
- Low2.1A vulnerability was identified in EasyCMS up to 1.6.Check if you run itEPSS 0.50%Mar 8, 2026
- Low2.1A flaw has been found in SourceCodester Computer Laboratory Management System 1.0.Check if you run itEPSS 0.32%Mar 8, 2026
- Low2.0A security vulnerability has been detected in ContiNew Admin up to 4.2.0.Check if you run itEPSS 0.60%Mar 8, 2026
- Low2.1A vulnerability was detected in xuxueli xxl-job up to 3.3.2.Check if you run itEPSS 0.38%Mar 8, 2026
- Low3.7A vulnerability was determined in mkj Dropbear up to 2025.89.Check if you run itEPSS 0.19%Mar 8, 2026
- Low2.1A vulnerability was detected in bufanyun HotGo up to 2.0.Check if you run itEPSS 0.36%Mar 8, 2026
- Low2.1A weakness has been identified in welovemedia FFmate up to 2.0.15.Check if you run itEPSS 0.39%Mar 7, 2026
- Medium5.5Caddy is an extensible server platform that uses TLS by default.Check if you run itEPSS 0.51%Mar 7, 2026
- High8.7Netmaker makes networks with WireGuard.Check if you run itEPSS 0.29%Mar 7, 2026
- High7.5PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser.Check if you run itEPSS 0.46%Mar 7, 2026
- Critical9.1Soft Serve is a self-hostable Git server for the command line.Check if you run itEPSS 0.41%Mar 7, 2026
- High8.8Ghost is a Node.js content management system.Check if you run itEPSS 0.19%Mar 7, 2026
- High8.6Netmaker makes networks with WireGuard.Check if you run itEPSS 0.47%Mar 7, 2026
- Medium5.9cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.Check if you run itEPSS 0.61%Mar 7, 2026
- Low2.7Backstage is an open framework for building developer portals.Check if you run itEPSS 0.40%Mar 7, 2026
- Critical9.3ZITADEL is an open source identity management platform.Check if you run itEPSS 0.38%Mar 7, 2026
- Medium4.3The Guardian News Feed plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.Check if you run itEPSS 0.13%Mar 7, 2026
- Medium4.3The Font Pairing Preview For Landing Pages plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.Check if you run itEPSS 0.13%Mar 7, 2026
- Medium4.3The True Ranker plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.9.Check if you run itEPSS 0.13%Mar 7, 2026
Sort