Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3The Purchase Button For Affiliate Link plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.2.Check if you run itEPSS 0.13%Mar 7, 2026
- Medium4.3Wallos is an open-source, self-hostable personal subscription tracker.Check if you run itEPSS 0.35%Mar 7, 2026
- High8.8Wallos is an open-source, self-hostable personal subscription tracker.Check if you run itEPSS 0.56%Mar 7, 2026
- Medium5.3Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations.Check if you run itEPSS 0.42%Mar 7, 2026
- High7.5express-rate-limit is a basic rate-limiting middleware for Express.Check if you run itEPSS 0.53%Mar 7, 2026
- Medium5.3Homarr is an open-source dashboard.Check if you run itEPSS 0.51%Mar 7, 2026
- High8.7Flowise is a drag & drop user interface to build a customized large language model flow.Check if you run itEPSS 0.65%Mar 7, 2026
- High7.5WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval.Check if you run itEPSS 0.36%Mar 7, 2026
- High7.2The Easy PHP Settings plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 1.0.4 via the method.Check if you run itEPSS 0.70%Mar 7, 2026
- Medium4.3The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.9.8.2.Check if you run itEPSS 0.13%Mar 7, 2026
- Medium4.3The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to unauthorized message deletion due to a missing capability check on the pg…Check if you run itEPSS 0.22%Mar 7, 2026
- Medium4.3The WP Frontend Profile plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.8.Check if you run itEPSS 0.17%Mar 7, 2026
- High8.5Plane is an an open-source project management tool.Check if you run itEPSS 0.35%Mar 6, 2026
- Medium6.9Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.43%Mar 6, 2026
- Medium4.3OliveTin gives access to predefined shell commands from a web interface.Check if you run itEPSS 0.62%Mar 6, 2026
- Medium6.5Agentgateway is an open source data plane for agentic AI connectivity within or across any agent framework or environment.Check if you run itEPSS 0.26%Mar 6, 2026
- Medium6.9Wekan is an open source kanban tool built with Meteor.Check if you run itEPSS 0.55%Mar 6, 2026
- Critical9.3Wekan is an open source kanban tool built with Meteor.Check if you run itEPSS 0.44%Mar 6, 2026
- Medium5.3Fastify incorrectly accepts malformed headers containing trailing characters after the subtype token, in violation of RFC 9110 §8.3.1(https://httpwg.org/specs/rfc9110.…Check if you run itEPSS 0.51%Mar 6, 2026
- High7.7Lemmy, a link aggregator and forum for the fediverse, is vulnerable to server-side request forgery via a dependency on activitypub_federation, a framework for Activity…Check if you run itEPSS 0.45%Mar 6, 2026
- Medium5.3Cryptomator encrypts data being stored on cloud infrastructure.Check if you run itEPSS 0.21%Mar 6, 2026
- High8.7Snipe-IT versions prior to 8.3.7 contain sensitive user attributes related to account privileges that are insufficiently protected against mass assignment.Check if you run itEPSS 0.48%Mar 6, 2026
- Medium6.9The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier.Check if you run itEPSS 0.56%Mar 6, 2026
- High8.7The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests.Check if you run itEPSS 0.37%Mar 6, 2026
- High8.7The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests.Check if you run itEPSS 0.46%Mar 6, 2026
Sort