Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.0OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.93%Mar 11, 2026
- High7.2StudioCMS is a server-side-rendered, Astro native, headless content management system.Check if you run itEPSS 0.38%Mar 11, 2026
- Medium5.4StudioCMS is a server-side-rendered, Astro native, headless content management system.Check if you run itEPSS 0.31%Mar 11, 2026
- High7.2StudioCMS is a server-side-rendered, Astro native, headless content management system.Check if you run itEPSS 0.45%Mar 11, 2026
- Medium4.3OpenProject is an open-source, web-based project management software.Check if you run itEPSS 0.27%Mar 11, 2026
- Critical9.8Runtipi is a personal homeserver orchestrator.Check if you run itEPSS 0.69%Mar 11, 2026
- Critical9.8Taskosaur is an open source project management platform with conversational AI for task execution in-app.Check if you run itEPSS 0.70%Mar 11, 2026
- High8.7Craft is a content management system (CMS).Check if you run itEPSS 0.48%Mar 11, 2026
- High8.1Craft is a content management system (CMS).Check if you run itEPSS 0.92%Mar 11, 2026
- Medium4.0A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on macOS allows a local administrator to disable the agent.Check if you run itEPSS 0.14%Mar 11, 2026
- Medium5.4In Splunk Enterprise versions below 10.2.1 and 10.0.4, and Splunk Cloud Platform versions below 10.2.2510.5, 10.1.2507.16, and 10.0.2503.12, a low-privileged user that…Check if you run itEPSS 0.16%Mar 11, 2026
- Medium6.5In Splunk Enterprise versions below 10.2.1, 10.0.4, 9.4.9, and 9.3.10, and Splunk Cloud Platform versions below 10.2.2510.7, 10.1.2507.17, 10.0.2503.12, and 9.3.2411.1…Check if you run itEPSS 0.17%Mar 11, 2026
- Medium6.5In Splunk Enterprise versions below 10.2.0, 10.0.3, 9.4.9, and 9.3.10, and Splunk Cloud Platform versions below 10.2.2510.5, 10.1.2507.16, 10.0.2503.11, and 9.3.2411.1…Check if you run itEPSS 0.24%Mar 11, 2026
- Medium6.3In Splunk Enterprise versions below 10.2.0, 10.0.3, 9.4.9, and 9.3.9, and Splunk Cloud Platform versions below 10.2.2510.4, 10.1.2507.15, 10.0.2503.11, and 9.3.2411.12…Check if you run itEPSS 0.21%Mar 11, 2026
- High8.8A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software could allow an authenticated, local attacker to elevate privileges and gai…Check if you run itEPSS 0.14%Mar 11, 2026
- Low2.1An edgecase in SSO implementation in Neo4j Enterprise edition versions prior to version 2026.02 can lead to unauthorised access under the following conditions: If a ne…Check if you run itEPSS 0.33%Mar 11, 2026
- Medium5.1The administrator password can be changed without knowledge of the current password.Check if you run itEPSS 0.48%Mar 11, 2026
- Critical9.3An issue was discovered in Lantronix EDS3000PS 3.1.0.0R2.Check if you run itEPSS 0.46%Mar 11, 2026
- High8.9Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes.Check if you run itEPSS 0.68%Mar 11, 2026
- Low2.0Incorrect resolving of namespaces in composite databases in Neo4j Enterprise edition prior to versions 2026.02 and 5.26.22 can lead to the following scenario: an admin…Check if you run itEPSS 0.24%Mar 11, 2026
- Medium6.4The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.9.28.1.Check if you run itEPSS 0.27%Mar 11, 2026
- High7.2The Checkout Field Editor (Checkout Manager) for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom radio and checkboxgroup field…Check if you run itEPSS 0.43%Mar 11, 2026
- High8.8The ExactMetrics – Google Analytics Dashboard for WordPress plugin is vulnerable to Improper Privilege Management in versions 7.1.0 through 9.0.2.Check if you run itEPSS 0.39%Mar 11, 2026
- High8.8The ExactMetrics – Google Analytics Dashboard for WordPress plugin is vulnerable to Insecure Direct Object Reference in versions 8.6.0 through 9.0.2.Check if you run itEPSS 0.64%Mar 11, 2026
- High7.2The Responsive Contact Form Builder & Lead Generation Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.…Check if you run itEPSS 0.25%Mar 11, 2026