Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Gokapi is a self-hosted file sharing server with automatic expiration and encryption support.Check if you run itEPSS 0.26%Mar 13, 2026
- Medium4.1Gokapi is a self-hosted file sharing server with automatic expiration and encryption support.Check if you run itEPSS 0.19%Mar 13, 2026
- Medium5.3SFTPGo is an open source, event-driven file transfer solution.Check if you run itEPSS 0.33%Mar 13, 2026
- Medium5.3SFTPGo is an open source, event-driven file transfer solution.Check if you run itEPSS 0.55%Mar 13, 2026
- High8.2calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books.Check if you run itEPSS 0.19%Mar 13, 2026
- High7.5The Formidable Forms plugin for WordPress is vulnerable to a payment integrity bypass in all versions up to, and including, 6.28.Check if you run itEPSS 0.32%Mar 13, 2026
- Medium5.3The Formidable Forms plugin for WordPress is vulnerable to an authorization bypass through user-controlled key in all versions up to, and including, 6.28.Check if you run itEPSS 0.37%Mar 13, 2026
- Medium5.4The GetGenie plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.3.2.Check if you run itEPSS 0.30%Mar 13, 2026
- Medium6.3Improper permission enforcement in Checkmk versions 2.4.0 before 2.4.0p23, 2.3.0 before 2.3.0p43, and 2.2.0 (EOL) allows unauthenticated users to enumerate existing ho…Check if you run itEPSS 0.20%Mar 13, 2026
- Medium6.5Issue summary: An OpenSSL TLS 1.3 server may fail to negotiate the expected preferred key exchange group when its key exchange group configuration includes the default…Check if you run itEPSS 0.45%Mar 13, 2026
- Medium6.4The GetGenie plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.3.2 due to missing validation on a user con…Check if you run itEPSS 0.24%Mar 13, 2026
- Low3.1FreeRDP is a free implementation of the Remote Desktop Protocol.Check if you run itEPSS 0.18%Mar 13, 2026
- High8.2FreeRDP is a free implementation of the Remote Desktop Protocol.Check if you run itEPSS 0.33%Mar 13, 2026
- High8.2FreeRDP is a free implementation of the Remote Desktop Protocol.Check if you run itEPSS 0.34%Mar 13, 2026
- High8.2Lexbor is a web browser engine library.Check if you run itEPSS 0.28%Mar 13, 2026
- High8.2Lexbor is a web browser engine library.Check if you run itEPSS 0.28%Mar 13, 2026
- Critical10.0SandboxJS is a JavaScript sandboxing library.Check if you run itEPSS 0.57%Mar 13, 2026
- Critical9.8HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and Cosy+ with firmware 23.xx before 23.0s3 have a stack buffer overflow…Check if you run itEPSS 0.75%Mar 13, 2026
- High7.5HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and Cosy+ with firmware 23.xx before 23.0s3 allows unauthenticated attack…Check if you run itEPSS 0.51%Mar 13, 2026
- Critical9.1HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and Cosy+ with firmware 23.xx before 23.0s3 have weak entropy for authent…Check if you run itEPSS 0.15%Mar 13, 2026
- High8.8HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and Cosy+ with firmware 23.xx before 23.0s3 have improper neutralization…Check if you run itEPSS 0.84%Mar 13, 2026
- High8.5Anchore Enterprise versions before 5.25.1 contain an SQL injection vulnerability in the GraphQL Reports API.Check if you run itEPSS 0.32%Mar 13, 2026
- Medium5.3Improper permission enforcement in Checkmk versions 2.4.0 before 2.4.0p23, 2.3.0 before 2.3.0p43, and 2.2.0 (EOL) allows authenticated users to enumerate existing host…Check if you run itEPSS 0.25%Mar 13, 2026
- Medium6.9Improper Handling of Highly Compressed Data (Compression Bomb) vulnerability in Erlang OTP ssh (ssh_transport modules) allows Denial of Service via Resource Depletion.Check if you run itEPSS 0.68%Mar 13, 2026
- Medium5.3Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Erlang OTP (ssh_sftpd module) allows Path Traversal.Check if you run itEPSS 0.39%Mar 13, 2026
Sort