Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in 100plugins Open User Map open-user-map allows Path Traversal.This issue…Check if you run itEPSS 0.34%Feb 20, 2026
- Medium6.5This vulnerability allows authenticated attackers to read an arbitrary file by changing a filepath parameter into an internal system path.Check if you run itEPSS 0.42%Feb 20, 2026
- High7.1node-tar is a full-featured Tar for Node.js.Check if you run itEPSS 0.21%Feb 20, 2026
- Critical9.3calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books.Check if you run itEPSS 0.57%Feb 20, 2026
- Critical9.3calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books.Check if you run itEPSS 0.87%Feb 20, 2026
- High8.8Music Assistant is an open-source media library manager that integrates streaming services with connected speakers.Check if you run itEPSS 0.74%Feb 20, 2026
- Medium6.7OpenClaw is a personal AI assistant.Check if you run itEPSS 0.24%Feb 20, 2026
- High7.1OpenClaw is a personal AI assistant.Check if you run itEPSS 0.55%Feb 20, 2026
- High8.8RustFS is a distributed object storage system built in Rust.Check if you run itEPSS 7.26%Jan 7, 2026
- High7.5Frappe is a full-stack web application framework.Check if you run itEPSS 0.43%Jan 5, 2026
- High8.1A path traversal vulnerability has been reported to affect Qfiling.Check if you run itEPSS 0.52%Jan 2, 2026
- Medium6.9A path traversal vulnerability has been reported to affect several QNAP operating system versions.Check if you run itEPSS 0.47%Jan 2, 2026
- Medium4.6A path traversal vulnerability has been reported to affect several QNAP operating system versions.Check if you run itEPSS 0.58%Jan 2, 2026
- Medium4.4A path traversal vulnerability has been reported to affect several product versions.Check if you run itEPSS 0.12%Jan 2, 2026
- High7.4FreshRSS is a self-hosted RSS feed aggregator.Check if you run itEPSS 0.70%Dec 16, 2025
- Medium4.9An issue was discovered in Weaviate OSS before 1.33.4.Check if you run itEPSS 0.50%Dec 12, 2025
- High7.2An issue was discovered in Weaviate OSS before 1.33.4.Check if you run itEPSS 0.91%Dec 12, 2025
- Medium4.9The WatchTowerHQ plugin for WordPress is vulnerable to arbitrary file read via the 'wht_download_big_object_origin' parameter in all versions up to, and including, 3.16.0.Check if you run itEPSS 0.51%Dec 12, 2025
- High8.8An issue was discovered in cPanel 110 through 132.Check if you run itEPSS 0.83%Dec 11, 2025
- Medium4.3Jenkins Redpen - Pipeline Reporter for Jira Plugin 1.054.v7b_9517b_6b_202 and earlier does not correctly perform path validation of the workspace directory while uploa…Check if you run itEPSS 0.34%Dec 10, 2025
- High8.7Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, exposes a .NET Remoting service in which an unauthenticated attacker can i…Check if you run itEPSS 0.75%Dec 10, 2025
- Medium4.9The Simple Download Counter plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 2.2.2.Check if you run itEPSS 0.52%Dec 10, 2025
- Critical9.8PipesHub is a fully extensible workplace AI platform for enterprise search and workflow automation.Check if you run itEPSS 1.81%Dec 10, 2025
- High8.7Gogs Path Traversal VulnerabilityPatch nowKEVEPSS 85.20%Dec 10, 2025
- High7.5NiceGUI is a Python-based UI framework.Check if you run itEPSS 1.12%Dec 9, 2025