Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.0OpenClaw versions prior to 2026.2.22 contain an authorization bypass vulnerability in the toolsBySender group policy matching that allows attackers to inherit elevated…Check if you run itEPSS 0.35%Mar 19, 2026
- Medium6.5OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.46%Mar 19, 2026
- Medium6.5OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.40%Mar 19, 2026
- Medium5.3OPEXUS eComplaint before version 10.1.0.0 allows an unauthenticated attacker to obtain or guess an existing case number and upload arbitrary files via 'Portal/EEOC/Doc…Check if you run itEPSS 0.36%Mar 19, 2026
- Medium6.5Authorization Bypass Through User-Controlled Key vulnerability in Themeum Tutor LMS tutor allows Exploiting Incorrectly Configured Access Control Security Levels.This…Check if you run itEPSS 0.30%Mar 19, 2026
- Medium6.5Authorization Bypass Through User-Controlled Key vulnerability in Really Simple Plugins B.V.Check if you run itEPSS 0.38%Mar 19, 2026
- Low2.7StudioCMS is a server-side-rendered, Astro native, headless content management system.Check if you run itEPSS 0.39%Mar 18, 2026
- Medium6.5OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.40%Mar 18, 2026
- Medium6.6In Juju from version 3.0.0 through 3.6.18, when a secret owner grants permissions to a secret to a grantee, the secret owner relies exclusively on a predictable XID of…Check if you run itEPSS 0.39%Mar 18, 2026
- Critical9.6mdjnelson/moodle-mod_customcert is a Moodle plugin for creating dynamically generated certificates with complete customization via the web browser.Check if you run itEPSS 0.30%Mar 18, 2026
- Medium5.7Sentry is a developer-first error tracking and performance monitoring tool.Check if you run itEPSS 0.42%Mar 18, 2026
- High8.8Outline is a service that allows for collaborative documentation.Check if you run itEPSS 0.32%Mar 17, 2026
- High7.7The extension fails to properly reset the generated MFA code after successful authentication.Check if you run itEPSS 0.47%Mar 17, 2026
- Medium5.3An Incorrect Access Control vulnerability exists in INDEX-EDUCATION PRONOTE prior to 2025.2.8.Check if you run itEPSS 0.25%Mar 16, 2026
- Low2.1A security vulnerability has been detected in CodeGenieApp serverless-express up to 4.17.1.Check if you run itEPSS 0.38%Mar 16, 2026
- High8.6Identity based authorization bypass vulnerability (IDOR) that allows an attacker to modify the data of a legitimate user account, such as changing the victim's email a…Check if you run itEPSS 0.39%Mar 16, 2026
- Medium4.3Mattermost Plugins versions <=11.3 11.0.3 11.2.2 10.10.11.0 fail to implement authorisation checks on comment block modifications, which allows an authorised attacker…Check if you run itEPSS 0.17%Mar 16, 2026
- High7.5The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 9.1.9…Check if you run itEPSS 0.27%Mar 16, 2026
- Medium4.3The Wicked Folders – Folder Organizer for Pages, Posts, and Custom Post Types plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up…Check if you run itEPSS 0.24%Mar 16, 2026
- Critical9.3Telesquare SKT LTE Router SDT-CS3B1 firmware version 1.2.0 contains an insecure direct object reference vulnerability that allows attackers to bypass authorization and…Check if you run itEPSS 0.53%Mar 16, 2026
- High8.5Wowza Streaming Engine 4.5.0 contains a local privilege escalation vulnerability that allows authenticated users to escalate privileges by replacing executable files d…Check if you run itEPSS 0.21%Mar 16, 2026
- High8.8A broken access control may allow an authenticated user to perform a horizontal privilege escalation.Check if you run itEPSS 0.43%Mar 13, 2026
- Medium5.3The Formidable Forms plugin for WordPress is vulnerable to an authorization bypass through user-controlled key in all versions up to, and including, 6.28.Check if you run itEPSS 0.46%Mar 13, 2026
- Medium5.4The GetGenie plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.3.2.Check if you run itEPSS 0.40%Mar 13, 2026
- Medium6.4The GetGenie plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.3.2 due to missing validation on a user con…Check if you run itEPSS 0.24%Mar 13, 2026