Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: btrfs: do not free data reservation in fallback from inline due to -ENOSPC If we fail to create an…Check if you run itEPSS 0.23%Mar 18, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: btrfs: fix reservation leak in some error paths when inserting inline extent If we fail to allocate…Check if you run itEPSS 0.32%Mar 18, 2026
- High8.1Glances is an open-source system cross-platform monitoring tool.Check if you run itEPSS 0.34%Mar 18, 2026
- Medium6.1A Cross-Site Scripting (XSS) vulnerability exists in the web-based configuration interface of Zucchetti Axess access control devices, including XA4, X3/X3BIO, X4, X7,…Check if you run itEPSS 0.19%Mar 18, 2026
- High7.5A zip slip vulnerability in the Admin import functionality of CTFd v3.8.1-18-gdb5a18c4 allows attackers to write arbitrary files outside the intended directories via s…Check if you run itEPSS 0.42%Mar 18, 2026
- High8.8The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.0.…Check if you run itEPSS 0.47%Mar 18, 2026
- Critical9.8Mura before 10.1.14 allows beanFeed.cfc getQuery sortby SQL injection.Check if you run itEPSS 0.33%Mar 18, 2026
- High7.2The Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App plugin for WordPress is vulnerable to Stored Cross-Si…Check if you run itEPSS 0.24%Mar 18, 2026
- Medium4.3Jenkins LoadNinja Plugin 2.1 and earlier does not mask LoadNinja API keys displayed on the job configuration form, increasing the potential for attackers to observe an…Check if you run itEPSS 0.22%Mar 18, 2026
- Medium4.3Jenkins LoadNinja Plugin 2.1 and earlier stores LoadNinja API keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with…Check if you run itEPSS 0.15%Mar 18, 2026
- High7.5Jenkins 2.442 through 2.554 (both inclusive), LTS 2.426.3 through LTS 2.541.2 (both inclusive) performs origin validation of requests made through the CLI WebSocket en…Check if you run itEPSS 0.28%Mar 18, 2026
- High8.8Jenkins 2.554 and earlier, LTS 2.541.2 and earlier does not safely handle symbolic links during the extraction of .tar and .tar.gz archives, allowing crafted archives…Check if you run itEPSS 2.07%Mar 18, 2026
- High8.2The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization on the REST API endpoin…Check if you run itEPSS 0.26%Mar 18, 2026
- High7.3The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 4.1.2.Check if you run itEPSS 0.45%Mar 18, 2026
- Medium5.3The Post SMTP plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the function in all versions up to, and incl…Check if you run itEPSS 0.23%Mar 18, 2026
- Medium6.4The Code Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom field meta values in all versions up to, and including, 2.5.1.Check if you run itEPSS 0.21%Mar 18, 2026
- High8.2When a plugin is installed using the Arturia Software Center (MacOS), it also installs an uninstall.sh bash script in a root owned path.Check if you run itEPSS 0.13%Mar 18, 2026
- High7.8The "Privileged Helper" component of the Arturia Software Center (MacOS) does not perform sufficient client code signature validation when a client connects.Check if you run itEPSS 0.13%Mar 18, 2026
- Critical9.8Mura before 10.1.14 allows beanFeed.cfc getQuery sortDirection SQL injection.Check if you run itEPSS 0.27%Mar 18, 2026
- High8.1MuraCMS through 10.1.10 contains a CSRF vulnerability that allows attackers to permanently destroy all deleted content stored in the trash system through a simple CSRF attack.Check if you run itEPSS 0.13%Mar 18, 2026
- High7.1The update address CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to manipulate user address information through CSRF.Check if you run itEPSS 0.11%Mar 18, 2026
- High8.8The Trash Restore CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to restore deleted content from the trash to unauthorized locations through CSRF.Check if you run itEPSS 0.13%Mar 18, 2026
- Medium6.5MuraCMS through 10.1.10 contains a CSRF vulnerability in the bundle creation functionality (csettings.cfc createBundle method) that allows unauthenticated attackers to…Check if you run itEPSS 0.17%Mar 18, 2026
- High8.0MuraCMS through 10.1.10 contains a CSRF vulnerability in the Add To Group functionality for user management (cUsers.cfc addToGroup method) that allows attackers to esc…Check if you run itEPSS 0.13%Mar 18, 2026
- High8.8The import form CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to upload and install malicious form definitions through a CSRF attack.Check if you run itEPSS 0.17%Mar 18, 2026
Sort