Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.9Tautulli is a Python based monitoring and tracking tool for Plex Media Server.Check if you run itEPSS 0.43%Mar 30, 2026
- Medium6.9Nginx UI is a web user interface for the Nginx web server.Check if you run itEPSS 0.48%Mar 30, 2026
- High7.5OpenAirInterface V2.2.0 AMF crashes when it fails to decode the message.Check if you run itEPSS 0.47%Mar 30, 2026
- Medium5.3MRCMS V3.1.2 contains an unauthenticated directory enumeration vulnerability in the file management module.Check if you run itEPSS 0.50%Mar 30, 2026
- Medium6.5A flaw in Node.js URL processing causes an assertion failure in native code when is called with a malformed internationalized domain name (IDN) containing invalid char…Check if you run itEPSS 0.32%Mar 30, 2026
- High7.5The SureForms – Contact Form, Payment Form & Other Custom Form Builder plugin for WordPress is vulnerable to Payment Amount Bypass in all versions up to, and including, 2.5.2.Check if you run itEPSS 1.16%Mar 28, 2026
- Medium5.3The PyPI package is a pure Python implementation of ECC (Elliptic Curve Cryptography) with support for ECDSA (Elliptic Curve Digital Signature Algorithm), EdDSA (Edwar…Check if you run itEPSS 0.52%Mar 27, 2026
- High7.5Forge (also called ) is a native implementation of Transport Layer Security in JavaScript.Check if you run itEPSS 0.45%Mar 27, 2026
- Medium6.5Statamic is a Laravel and Git powered content management system (CMS).Check if you run itEPSS 0.44%Mar 27, 2026
- High7.5A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0 in the add-stock.php file.Check if you run itEPSS 0.38%Mar 27, 2026
- High7.5A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0 in the add-stock.php file.Check if you run itEPSS 0.49%Mar 27, 2026
- Critical9.4OpenBao is an open source identity-based secrets management system.Check if you run itEPSS 0.45%Mar 27, 2026
- Low1.2GlobaLeaks is free and open-source whistleblowing software.Check if you run itEPSS 0.29%Mar 27, 2026
- Critical9.6In its design for automatic terminal command execution, AI Code offers two options: Execute safe commands and execute all commands.Check if you run itEPSS 0.67%Mar 27, 2026
- High7.2A buffer overflow vulnerability exists in the ONVIF GetStreamUri function of LSC Indoor Camera V7.6.32.Check if you run itEPSS 0.54%Mar 27, 2026
- High7.3A user with permission "update world" in any Venueless world is able to exfiltrate chat messages from direct messages or channels in other worlds on the same server du…Check if you run itEPSS 0.38%Mar 27, 2026
- High7.5ManageSieve AUTHENTICATE command crashes when using literal as SASL initial response.Check if you run itEPSS 0.70%Mar 27, 2026
- High7.5When sending invalid base64 SASL data, login process is disconnected from the auth server, causing all active authentication sessions to fail.Check if you run itEPSS 0.45%Mar 27, 2026
- Medium5.8OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.Check if you run itEPSS 0.31%Mar 27, 2026
- Medium6.5Kirby CMS through 5.1.4 allows an authenticated user with 'Editor' permissions to cause a persistent Denial of Service (DoS) via a malformed image upload.Check if you run itEPSS 0.57%Mar 26, 2026
- Critical9.8HCL Aftermarket DPC is affected by Improper Input Validation which allows an attacker to inject executable code and can carry out attacks such as XSS, SQL Injection, C…Check if you run itEPSS 1.00%Mar 26, 2026
- Medium5.5A security flaw has been discovered in 648540858 wvp-GB28181-pro up to 2.7.4.Check if you run itEPSS 0.54%Mar 26, 2026
- High7.5LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript.Check if you run itEPSS 0.52%Mar 26, 2026
- High7.5LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript.Check if you run itEPSS 0.60%Mar 26, 2026
- High7.5NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system.Check if you run itEPSS 0.84%Mar 25, 2026