Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.5CWE‑502: Deserialization of Untrusted Data vulnerability exists that could cause arbitrary code execution with administrative privileges when a locally authenticated a…Check if you run itEPSS 0.19%Mar 10, 2026
- High7.5The The Events Calendar plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 6.15.17 via the 'ajax_create_import' function.Check if you run itEPSS 0.37%Mar 10, 2026
- Medium5.3Admidio is an open-source user management solution.Check if you run itEPSS 0.27%Mar 10, 2026
- High8.2Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.47%Mar 10, 2026
- Critical9.9OneUptime is a solution for monitoring and managing online services.Check if you run itEPSS 0.46%Mar 10, 2026
- High8.6OneUptime is a solution for monitoring and managing online services.Check if you run itEPSS 0.22%Mar 10, 2026
- Medium5.4facileManager is a modular suite of web apps built with the sysadmin in mind.Check if you run itEPSS 0.19%Mar 10, 2026
- Medium6.1facileManager is a modular suite of web apps built with the sysadmin in mind.Check if you run itEPSS 0.20%Mar 10, 2026
- High8.8Bucket is a MediaWiki extension to store and retrieve structured data on articles.Check if you run itEPSS 0.32%Mar 10, 2026
- Medium4.6Flarum is open-source forum software.Check if you run itEPSS 0.18%Mar 10, 2026
- Critical9.9OneUptime is a solution for monitoring and managing online services.Check if you run itEPSS 0.41%Mar 10, 2026
- Medium5.5WWBN AVideo is an open source video platform.Check if you run itEPSS 0.39%Mar 10, 2026
- Medium6.5PowerSync Service is the server-side component of the PowerSync sync engine.Check if you run itEPSS 0.21%Mar 10, 2026
- Critical9.8SiYuan is a personal knowledge management system.Check if you run itEPSS 1.11%Mar 10, 2026
- Critical9.0Appsmith is a platform to build admin panels, internal tools, and dashboards.Check if you run itEPSS 0.32%Mar 10, 2026
- High7.3If a legitimate user confirms a self-update prompt or initiate an installation of a CODESYS Development System, a low privileged local attacker can gain elevated right…Check if you run itEPSS 0.09%Mar 10, 2026
- Medium4.3Kubewarden is a policy engine for Kubernetes.Check if you run itEPSS 0.20%Mar 10, 2026
- High7.1Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to your services.Check if you run itEPSS 0.29%Mar 10, 2026
- Medium6.1Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to your services.Check if you run itEPSS 0.22%Mar 10, 2026
- High7.1InstantCMS is a free and open source content management system.Check if you run itEPSS 0.14%Mar 10, 2026
- Medium6.8Multiple i-フィルター products are configured with improper file access permission settings.Check if you run itEPSS 0.11%Mar 10, 2026
- High7.7Due to an uncontrolled resource consumption (Denial of Service) vulnerability, an authenticated attacker with regular user privileges and network access can repeatedly…Check if you run itEPSS 0.39%Mar 10, 2026
- Medium5.0Due to a missing authorization check in SAP NetWeaver Application Server for ABAP, an authenticated attacker with user privileges could read Database Analyzer Log File…Check if you run itEPSS 0.24%Mar 10, 2026
- Medium5.8Due to missing authorization check in SAP S/4HANA HCM Portugal and SAP ERP HCM Portugal, a user with high privileges could access sensitive data belonging to another company.Check if you run itEPSS 0.27%Mar 10, 2026
- Medium5.9Due to a Missing Authorization Check in SAP Business Warehouse (Service API), an authenticated attacker could perform unauthorized actions via an affected RFC function module.Check if you run itEPSS 0.23%Mar 10, 2026
Sort