Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Critical9.6Incus is a system container and virtual machine manager.EPSS 0.5%Mar 27, 2026
- Medium4.3Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.EPSS 0.4%Mar 27, 2026
- High8.8Sharp is a content management framework built for Laravel as a package.EPSS 0.6%Mar 26, 2026
- High7.5SiYuan is a personal knowledge management system.EPSS 0.6%Mar 26, 2026
- High8.1Fireshare facilitates self-hosted media and link sharing.EPSS 0.5%Mar 26, 2026
- Medium6.3A malicious SCP server can send unexpected paths that could make the client application override local files outside of working directory.EPSS 0.4%Mar 26, 2026
- High8.8Zoraxy is a general purpose HTTP reverse proxy and forwarding tool.EPSS 0.5%Mar 26, 2026
- Medium6.5GoDoxy is a reverse proxy and container orchestrator for self-hosters.EPSS 0.5%Mar 26, 2026
- Medium4.9Mattermost versions 11.4.x <= 11.4.0, 11.3.x <= 11.3.1, 11.2.x <= 11.2.3, 10.11.x <= 10.11.11 fail to validate Advanced Logging file target paths which allows system a…EPSS 0.5%Mar 26, 2026
- High8.7OpenClaw before 2026.3.28 contains a path traversal vulnerability in media parsing that allows attackers to read arbitrary files by bypassing path validation in the is…EPSS 0.7%Mar 26, 2026
- High8.7Problem in the Small HTTP Server v3.06.36 service.EPSS 0.6%Mar 26, 2026
- High8.0Saloon is a PHP library that gives users tools to build API integrations and SDKs.EPSS 0.7%Mar 26, 2026
- High8.8The WP Job Portal plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'WPJOBPORTALcustomfields::removeFileCus…Mar 26, 2026
- High7.5Sonarr is a PVR for Usenet and BitTorrent users.EPSS 0.7%Mar 25, 2026
- High7.5pf4j before 20c2f80 has a path traversal vulnerability in the extract() function of Unzip.java, where improper handling of zip entry names can allow directory traversa…EPSS 0.9%Mar 25, 2026
- High8.8Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642.EPSS 0.7%Mar 25, 2026
- Medium6.8Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in icopydoc YML for Yandex Market yml-for-yandex-market allows Path Traver…EPSS 0.5%Mar 25, 2026
- High8.6Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in vanquish WooCommerce Support Ticket System woocommerce-support-ticket-s…EPSS 0.5%Mar 25, 2026
- Medium6.8Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in NYSL Spam Protect for Contact Form 7 wp-contact-form-7-spam-blocker all…EPSS 0.5%Mar 25, 2026
- High8.6Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Whitebox-Studio Scape scape allows Path Traversal.This issue affects Sc…EPSS 0.5%Mar 25, 2026
- High8.8Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in AA-Team WZone woozone allows Path Traversal.This issue affects WZone: f…EPSS 0.5%Mar 25, 2026
- Medium6.8Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in add-ons.org Product File Upload for WooCommerce products-file-upload-fo…EPSS 0.4%Mar 25, 2026
- High7.7Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in designingmedia Energox energox allows Path Traversal.This issue affects…EPSS 0.3%Mar 25, 2026
- High7.7Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in designingmedia Instant VA instantva allows Path Traversal.This issue af…EPSS 0.3%Mar 25, 2026
- High7.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in flexcubed PitchPrint pitchprint allows Path Traversal.This issue affect…EPSS 0.6%Mar 25, 2026