Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3The Cost Calculator Builder plugin for WordPress is vulnerable to Unauthenticated Price Manipulation and Insecure Direct Object Reference (IDOR) in all versions up to,…Check if you run itEPSS 0.23%May 13, 2026
- Medium5.1Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investigation, transparency, and verification.Check if you run itEPSS 0.47%May 12, 2026
- Medium5.3ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript.Check if you run itEPSS 0.51%May 12, 2026
- Medium6.2LobeHub is a work-and-lifestyle space to find, build, and collaborate with agent teammates that grow with you.Check if you run itEPSS 0.35%May 12, 2026
- High7.3YetAnotherForum.NET (YAF.NET) is a C# ASP.NET forum.Check if you run itEPSS 0.35%May 12, 2026
- Critical9.3Affected devices do not properly validate and sanitize Technology Object (TO) name rendered on the "Motion Control Diagnostics" page of the web interface.Check if you run itEPSS 0.54%May 12, 2026
- Critical9.3Affected devices do not properly validate and sanitize PLC/station name rendered on the "communication" parameters page of the web interface.Check if you run itEPSS 0.54%May 12, 2026
- High8.7A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0).Check if you run itEPSS 0.32%May 12, 2026
- High7.2The LifePress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'n' parameter of the lp_update_mds AJAX action in all versions up to, and including, 2.2.2.Check if you run itEPSS 0.40%May 12, 2026
- Medium4.7SAPUI5 (Search UI) allows an unauthenticated attacker to manipulate specific URL parameters on the Search UI to include malicious content.Check if you run itEPSS 0.32%May 12, 2026
- Critical9.3DeepChat is an open-source artificial intelligence agent platform that unifies models, tools, and agents.Check if you run itEPSS 0.50%May 11, 2026
- Critical9.6DeepChat is an open-source artificial intelligence agent platform that unifies models, tools, and agents.Check if you run itEPSS 0.56%May 11, 2026
- Medium6.4WWBN AVideo is an open source video platform.Check if you run itEPSS 0.26%May 11, 2026
- Medium4.5Audiobookshelf is a self-hosted audiobook and podcast server.Check if you run itEPSS 0.36%May 11, 2026
- Medium6.3Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in ninenines cowlib allows SSE event splitting and injection via unvalidated field values.Check if you run itEPSS 0.46%May 11, 2026
- Medium6.3OpenClaw before 2026.4.20 contains a hook session-key bypass vulnerability that allows attackers to circumvent the hooks.allowRequestSessionKey opt-in restriction.Check if you run itEPSS 0.47%May 11, 2026
- Medium6.3OpenClaw before 2026.4.20 fails to properly preserve untrusted labels for isolated cron awareness events, allowing webhook-triggered cron agent output to be recorded a…Check if you run itEPSS 0.22%May 11, 2026
- Medium5.3pyLoad is a free and open-source download manager written in Python.Check if you run itEPSS 0.41%May 11, 2026
- Medium5.4Open edX Platform enables the authoring and delivery of online learning at any scale.Check if you run itEPSS 0.26%May 11, 2026
- High7.7Grav is a file-based Web platform.Check if you run itEPSS 0.39%May 11, 2026
- Medium5.4The form plugin for Grav adds the ability to create and use forms.Check if you run itEPSS 0.26%May 11, 2026
- High8.7SQL injection vulnerability in pgAdmin 4 Maintenance Tool.Check if you run itEPSS 0.64%May 11, 2026
- Medium6.9Grav is a file-based Web platform.Check if you run itEPSS 0.26%May 11, 2026
- Low2.1A weakness has been identified in Akaunting 3.1.21.Check if you run itEPSS 0.35%May 9, 2026
- Critical9.0Postiz is an AI social media scheduling tool.Check if you run itEPSS 0.44%May 8, 2026