Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.2File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory.Check if you run itEPSS 0.43%Apr 7, 2026
- High7.5File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory.Check if you run itEPSS 2.38%Apr 7, 2026
- High8.6Dolibarr ERP/CRM versions prior to 23.0.2 contain an authenticated remote code execution vulnerability in the dol_eval_standard() function that fails to apply forbidde…Check this weekEPSS 15.53%Apr 7, 2026
- Medium6.5The SQL Chart Builder WordPress plugin before 2.3.8 does not properly escape user input as it is concatened to SQL queries, making it possible for attackers to conduct…Check if you run itEPSS 0.29%Apr 7, 2026
- High7.5ZLMediaKit is a streaming media service framework.Check if you run itEPSS 0.52%Apr 6, 2026
- High8.5Netgate AMITI Antivirus build 23.0.305 contains an unquoted service path vulnerability in the AmitiAvSrv and AmitiAntivirusHealth services that allows local attackers…Check if you run itEPSS 0.72%Apr 4, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: mtd: Avoid boot crash in RedBoot partition table parser Given CONFIG_FORTIFY_SOURCE=y and a recent…Check if you run itEPSS 0.14%Apr 3, 2026
- Medium4.7In the Linux kernel, the following vulnerability has been resolved: soc: fsl: qbman: fix race condition in qman_destroy_fq When QMAN_FQ_FLAG_DYNAMIC_FQID is set, there…Check if you run itEPSS 0.09%Apr 3, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n When CONFIG_IPV6 is disabl…Check if you run itEPSS 0.13%Apr 3, 2026
- Medium6.5** UNSUPPORTED WHEN ASSIGNED ** Focalboard version 8.0 fails to sanitize category IDs before incorporating them into dynamic SQL statements when reordering categories.Check if you run itEPSS 0.39%Apr 3, 2026
- High7.1A heap-based buffer overflow vulnerability was identified in TP-Link Tapo C520WS v2.6 within the asynchronous parsing of local video stream content due to insufficient…Check if you run itEPSS 0.36%Apr 2, 2026
- High7.1A heap-based buffer overflow vulnerability was identified in TP-Link Tapo C100/C101 v5, C520WS v2.6 in the HTTP POST body parsing logic due to missing validation of re…Check if you run itEPSS 0.52%Apr 2, 2026
- Medium6.5Rack is a modular Ruby web server interface.Check if you run itEPSS 0.24%Apr 2, 2026
- High7.8Glances is an open-source system cross-platform monitoring tool.Check if you run itEPSS 0.78%Apr 2, 2026
- High8.7SzafirHost downloads necessary files in the context of the initiating web page.Check if you run itEPSS 0.22%Apr 2, 2026
- High7.5The W3 Total Cache plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 2.9.3.Check if you run itEPSS 2.66%Apr 2, 2026
- Medium6.9File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory.Check if you run itEPSS 0.36%Apr 1, 2026
- Critical9.0File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory.Check if you run itEPSS 0.39%Apr 1, 2026
- Critical9.8File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory.Check if you run itEPSS 0.66%Apr 1, 2026
- High7.0Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune.Check if you run itEPSS 0.15%Apr 1, 2026
- High8.4An arbitrary file overwrite vulnerability in Tinybeans Private Family Album App v5.9.5-prod allows attackers to overwrite critical internal files via the file import p…Check if you run itEPSS 0.22%Apr 1, 2026
- Low2.1A vulnerability was identified in z-9527 admin 1.0/2.0.Check if you run itEPSS 0.41%Apr 1, 2026
- Low2.1A vulnerability has been found in gougucms 4.08.18.Check if you run itEPSS 0.41%Apr 1, 2026
- Medium5.3XenForo before 2.2.17 and 2.3.1 allows open redirect via a specially crafted URL.Check if you run itEPSS 0.15%Apr 1, 2026
- Unknowngamipress gamipress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 2.55%Apr 1, 2026