Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2The Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin plugin for WordPress is vulnerable to Server-Side Request Forgery in all versi…Check if you run itEPSS 0.68%Mar 3, 2026
- High8.4In createRequest of MediaProvider.java, there is a possible way for an app to gain read/write access to non-existing files due to a logic error in the code.Check if you run itEPSS 0.10%Mar 2, 2026
- High7.8In executeRequest of ActivityStarter.java, there is a possible launch anywhere due to a confused deputy.Check if you run itEPSS 0.10%Mar 2, 2026
- Critical9.9ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI.Check if you run itEPSS 0.62%Mar 2, 2026
- Medium6.5ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI.Check if you run itEPSS 0.25%Mar 2, 2026
- High7.1Chamilo is a learning management system.Check if you run itEPSS 0.30%Mar 2, 2026
- Critical9.8Chamilo is a learning management system.Check if you run itEPSS 0.91%Mar 2, 2026
- Medium5.3Chamilo is a learning management system.Check if you run itEPSS 0.34%Mar 2, 2026
- High7.1The CGM CLININET application uses direct, sequential object identifiers "MessageID" without proper authorization checks.Check if you run itEPSS 0.22%Mar 2, 2026
- Medium6.9wpForo Forum 2.4.14 contains an information disclosure vulnerability that allows unauthenticated users to retrieve private and unapproved forum topics via the global R…Check if you run itEPSS 0.49%Feb 28, 2026
- Medium6.5The Super Stage WP WordPress plugin through 1.0.1 unserializes user input via REQUEST, which could allow unauthenticated users to perform PHP Object Injection when a s…Check if you run itEPSS 0.20%Feb 28, 2026
- High8.6Statmatic is a Laravel and Git powered content management system (CMS).Check if you run itEPSS 0.48%Feb 27, 2026
- Medium5.3Featured Image from Content (featured-image-from-content) WordPress plugin versions prior to 1.7 contain an authenticated server-side request forgery vulnerability tha…Check if you run itEPSS 0.42%Feb 27, 2026
- High8.6Gradio is an open-source Python package designed for quick prototyping.Check if you run itEPSS 0.36%Feb 27, 2026
- Critical9.8WeGIA is a web manager for charitable institutions.Check if you run itEPSS 0.68%Feb 27, 2026
- Medium5.3calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books.Check if you run itEPSS 0.19%Feb 27, 2026
- Medium6.5Seerr is an open-source media request and discovery manager for Jellyfin, Plex, and Emby.Check if you run itEPSS 0.43%Feb 27, 2026
- Medium5.4Seerr is an open-source media request and discovery manager for Jellyfin, Plex, and Emby.Check if you run itEPSS 0.31%Feb 27, 2026
- Critical9.8Seerr is an open-source media request and discovery manager for Jellyfin, Plex, and Emby.Check if you run itEPSS 0.70%Feb 27, 2026
- High8.2A vulnerability in @fastify/middie versions < 9.2.0 can result in authentication/authorization bypass when using path-scoped middleware (for example, app.use('/secret', auth)).Check if you run itEPSS 0.53%Feb 27, 2026
- Medium5.1SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a cross-site request forgery vulnerability in its management interface that allows attackers to indu…Check if you run itEPSS 0.16%Feb 27, 2026
- Low2.0Uncontrolled Resource Consumption, Deserialization of Untrusted Data vulnerability in hexpm hex_core (hex_api modules), hexpm hex (mix_hex_api modules), erlang rebar3…Check if you run itEPSS 0.61%Feb 27, 2026
- High8.8osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the currency parameter.Check if you run itEPSS 0.34%Feb 27, 2026
- High8.8osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the produc…Check if you run itEPSS 0.34%Feb 27, 2026
- High8.8osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the review…Check if you run itEPSS 0.34%Feb 27, 2026
Sort