Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability [CWE-22] vulnerability in Fortinet FortiSOAR Agent Communication Bridge…EPSS 0.5%Mar 10, 2026
- High7.5The The Events Calendar plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 6.15.17 via the 'ajax_create_import' function.EPSS 0.5%Mar 10, 2026
- Critical9.8SiYuan is a personal knowledge management system.EPSS 1.2%Mar 10, 2026
- High8.2node-tar is a full-featured Tar for Node.js.EPSS 0.2%Mar 10, 2026
- Medium6.0Camaleon CMS versions 2.4.5.0 through 2.9.0, prior to commit f54a77e, contain a path traversal vulnerability in the AWS S3 uploader implementation that allows authenti…EPSS 0.8%Mar 10, 2026
- High8.1Budibase is a low code platform for creating internal tools, workflows, and admin panels.EPSS 0.3%Mar 9, 2026
- High7.5An issue pertaining to CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.EPSS 0.4%Mar 9, 2026
- High7.5A vulnerability in the function of the module in nltk version 3.9.2 allows arbitrary file read due to improper validation of input paths.EPSS 0.5%Mar 9, 2026
- Medium5.3Actual Sync Server allows authenticated users to upload files through POST /sync/upload-user-file.EPSS 0.5%Mar 9, 2026
- High8.8A low-privileged remote attacker can exploit an arbitrary file write vulnerability in the wwupload.cgi endpoint.EPSS 0.6%Mar 9, 2026
- High8.8A low-privileged remote attacker can abuse the backup restore functionality of UBR (ubr-restore) which runs with elevated privileges and does not validate the contents…EPSS 0.6%Mar 9, 2026
- Medium6.5A low-privileged remote attacker can exploit the ubr-logread method in wwwubr.cgi to read arbitrary files on the system.EPSS 0.5%Mar 9, 2026
- Low2.1A security flaw has been discovered in doramart DoraCMS 3.0.x.EPSS 0.8%Mar 9, 2026
- Medium5.5A vulnerability was identified in Tsinghua Unigroup Electronic Archives System 3.2.210802(62532).EPSS 0.8%Mar 8, 2026
- Medium5.5A vulnerability has been found in SourceCodester Modern Image Gallery App 1.0.EPSS 0.9%Mar 8, 2026
- Medium6.3Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.EPSS 0.4%Mar 7, 2026
- High8.2node-tar is a full-featured Tar for Node.js.EPSS 0.4%Mar 7, 2026
- Medium5.5eml_parser serves as a python module for parsing eml files and returning various information found in the e-mail as well as computed information.EPSS 0.2%Mar 7, 2026
- Medium5.3Karapace is an open-source implementation of Kafka REST and Schema Registry.EPSS 0.4%Mar 7, 2026
- Low2.7Backstage is an open framework for building developer portals.EPSS 0.4%Mar 7, 2026
- High7.2The Meta Box plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'ajax_delete_file' function in all versions…EPSS 2.4%Mar 7, 2026
- High8.7Wallos is an open-source, self-hostable personal subscription tracker.EPSS 0.5%Mar 7, 2026
- Low2.5On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference a file outside of the Root in whic…EPSS 0.1%Mar 6, 2026
- Low2.0dbt-common is the shared common utilities for dbt-core and adapter implementations use.EPSS 0.4%Mar 6, 2026
- High8.2Zarf is an Airgap Native Packager Manager for Kubernetes.EPSS 0.2%Mar 6, 2026