Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Apache Airflow versions 3.0.0 through 3.1.7 FastAPI DagVersion listing API does not apply per-DAG authorization filtering when the request is made with dag_id set to "…Check if you run itEPSS 0.42%Mar 17, 2026
- Medium6.5A flaw was found in libsoup.Check if you run itEPSS 0.19%Mar 17, 2026
- Medium6.5A flaw was found in libsoup.Check if you run itEPSS 0.23%Mar 17, 2026
- Medium5.5A flaw was found in libsoup, a library used by applications to send network requests.Check if you run itEPSS 0.21%Mar 17, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: audit: add missing syscalls to read class The "at" variant of getxattr() and listxattr() are missin…Check if you run itEPSS 0.13%Mar 17, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: audit: add fchmodat2() to change attributes class fchmodat2(), introduced in version 6.6 is current…Check if you run itEPSS 0.13%Mar 17, 2026
- High7.7The extension fails to properly reset the generated MFA code after successful authentication.Check if you run itEPSS 0.27%Mar 17, 2026
- Low2.3The extension fails to verify, if an authenticated user has permissions to access to redirects resulting in exposure of redirect records when editing a page.Check if you run itEPSS 0.17%Mar 17, 2026
- Medium5.3Missing Authorization vulnerability in Pluggabl Booster for WooCommerce woocommerce-jetpack allows Exploiting Incorrectly Configured Access Control Security Levels.Thi…Check if you run itEPSS 0.23%Mar 17, 2026
- Medium5.2The extension fails to properly define allowed classes used when deserializing transport failure metadata.Check if you run itEPSS 0.22%Mar 17, 2026
- Critical9.3GCB/FCB Audit Software developed by DrangSoft has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly access certain APIs to…Check if you run itEPSS 0.47%Mar 17, 2026
- Low2.3In affected versions of Octopus Server it was possible for a low privileged user to manipulate an API request to change the signing key expiration and revocation time…Check if you run itEPSS 0.16%Mar 17, 2026
- High7.7Versions of the package sjcl before 1.0.9 are vulnerable to Improper Verification of Cryptographic Signature due to missing point-on-curve validation in sjcl.ecc.basic…Check if you run itEPSS 0.26%Mar 17, 2026
- Medium6.5A vulnerability was discovered in the Kubernetes CSI Driver for NFS where the subDir parameter in volume identifiers was insufficiently validated.Check if you run itEPSS 0.73%Mar 17, 2026
- Low2.1A weakness has been identified in frdel/agent0ai agent-zero 0.9.7.Check if you run itEPSS 0.21%Mar 17, 2026
- Low2.1A security flaw has been discovered in frdel/agent0ai agent-zero 0.9.7-10.Check if you run itEPSS 0.37%Mar 17, 2026
- Medium5.3The Royal Addons for Elementor – Addons and Templates Kit for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including…Check if you run itEPSS 0.21%Mar 17, 2026
- Medium6.5A flaw was found in libucl.Check if you run itEPSS 0.39%Mar 17, 2026
- High7.5The WowStore – Store Builder & Product Blocks for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the ‘search’ parameter in all versions up to, and…Check if you run itEPSS 0.32%Mar 17, 2026
- Medium5.5A security vulnerability has been detected in Tiandy Easy7 Integrated Management Platform up to 7.17.0.Check if you run itEPSS 0.26%Mar 17, 2026
- Medium5.5A weakness has been identified in Tiandy Easy7 Integrated Management Platform 7.17.0.Check if you run itEPSS 0.26%Mar 17, 2026
- Medium5.5A security flaw has been discovered in Tiandy Easy7 Integrated Management Platform 7.17.0.Check if you run itEPSS 0.27%Mar 17, 2026
- Low2.0A vulnerability was identified in taoofagi easegen-admin up to 8f87936ac774065b92fb20aab55b274a6ea76433.Check if you run itEPSS 0.49%Mar 17, 2026
- Critical9.0ConnectWise ScreenConnect Improper Verification of Cryptographic SignaturePatch nowKEVEPSS 0.37%Mar 17, 2026
- High7.18theme XStore Core Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.19%Mar 17, 2026
Sort