Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.3Chamilo LMS is a learning management system.Check if you run itEPSS 0.36%Mar 16, 2026
- High8.8Chamilo LMS is a learning management system.Check if you run itEPSS 0.91%Mar 16, 2026
- Critical9.3Chamilo LMS is a learning management system.Check if you run itEPSS 0.61%Mar 16, 2026
- High7.8A local attacker can bypass OpenEDR's 2.5.1.0 self-defense mechanism by renaming a malicious executable to match a trusted process name (e.g., csrss.exe, edrsvc.exe, edrcon.exe).Check if you run itEPSS 0.16%Mar 16, 2026
- High8.4A DLL search order hijacking vulnerability in Thermalright TR-VISION HOME on Windows (64-bit) allows a local attacker to escalate privileges via DLL side-loading.Check if you run itEPSS 0.21%Mar 16, 2026
- Critical9.6AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.Check if you run itEPSS 0.76%Mar 16, 2026
- Medium5.1Serviio PRO 1.8 DLNA Media Streaming Server contains a DOM-based cross-site scripting vulnerability that allows attackers to execute arbitrary HTML and script code by…Check if you run itEPSS 0.24%Mar 16, 2026
- Medium5.1Wowza Streaming Engine 4.5.0 contains multiple reflected cross-site scripting vulnerabilities in the enginemanager interface where input passed through various paramet…Check if you run itEPSS 0.24%Mar 16, 2026
- Medium6.9Wowza Streaming Engine 4.5.0 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions by crafting malicious web pages.Check if you run itEPSS 0.16%Mar 16, 2026
- High8.7Wowza Streaming Engine 4.5.0 contains a privilege escalation vulnerability that allows authenticated read-only users to elevate privileges to administrator by manipula…Check if you run itEPSS 0.21%Mar 16, 2026
- High8.5Wowza Streaming Engine 4.5.0 contains a local privilege escalation vulnerability that allows authenticated users to escalate privileges by replacing executable files d…Check if you run itEPSS 0.21%Mar 16, 2026
- Medium5.4Statamic is a Laravel and Git powered content management system (CMS).Check if you run itEPSS 0.26%Mar 13, 2026
- Medium5.4Cross-Site Request Forgery (CSRF) vulnerability in Ruben Garcia GamiPress gamipress allows Cross Site Request Forgery.This issue affects GamiPress: from n/a through <= 7.6.6.Check if you run itEPSS 0.14%Mar 13, 2026
- Critical9.3Centrifugo is an open-source scalable real-time messaging server.Check if you run itEPSS 0.37%Mar 13, 2026
- High7.5Dagu is a workflow engine with a built-in Web user interface.Check if you run itEPSS 0.77%Mar 13, 2026
- Medium5.3SFTPGo is an open source, event-driven file transfer solution.Check if you run itEPSS 0.35%Mar 13, 2026
- Medium5.3The Formidable Forms plugin for WordPress is vulnerable to an authorization bypass through user-controlled key in all versions up to, and including, 6.28.Check if you run itEPSS 0.46%Mar 13, 2026
- Critical10.0The Honeywell IQ4x building management controller, exposes its full web-based HMI without authentication in its factory-default configuration.Check if you run itEPSS 1.03%Mar 12, 2026
- Medium5.9This is an uncontrolled resource consumption vulnerability (CWE-400) that can lead to Denial of Service (DoS).Check if you run itEPSS 0.74%Mar 12, 2026
- Medium4.7Backstage is an open framework for building developer portals.Check if you run itEPSS 0.24%Mar 12, 2026
- Low2.1A vulnerability was detected in 648540858 wvp-GB28181-pro up to 2.7.4-20260107.Check if you run itEPSS 0.36%Mar 12, 2026
- Medium5.4OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.65%Mar 11, 2026
- Critical10.0Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune.Check if you run itEPSS 0.76%Mar 11, 2026
- Critical9.1Unity Catalog is an open, multi-modal Catalog for data and AI.Check if you run itEPSS 0.24%Mar 11, 2026
- High7.5cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.Check if you run itEPSS 0.57%Mar 11, 2026