Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5express-rate-limit is a basic rate-limiting middleware for Express.Check if you run itEPSS 0.48%Mar 7, 2026
- Medium6.5hoppscotch is an open source API development ecosystem.Check if you run itEPSS 0.24%Mar 7, 2026
- High7.7Flowise is a drag & drop user interface to build a customized large language model flow.Check this weekEPSS 36.91%Mar 7, 2026
- High8.8Flowise is a drag & drop user interface to build a customized large language model flow.Check if you run itEPSS 0.44%Mar 7, 2026
- Medium5.3Homarr is an open-source dashboard.Check if you run itEPSS 0.46%Mar 7, 2026
- High7.5Homarr is an open-source dashboard.Check if you run itEPSS 1.18%Mar 7, 2026
- High8.8The Paid Videochat Turnkey Site – HTML5 PPV Live Webcams plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 7.3.20.Check if you run itEPSS 0.39%Mar 7, 2026
- High7.7Flowise is a drag & drop user interface to build a customized large language model flow.Check this weekEPSS 13.43%Mar 7, 2026
- High8.2Flowise is a drag & drop user interface to build a customized large language model flow.Check this weekEPSS 15.24%Mar 7, 2026
- High8.7Flowise is a drag & drop user interface to build a customized large language model flow.Check if you run itEPSS 0.50%Mar 7, 2026
- High7.5WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval.Check if you run itEPSS 0.40%Mar 7, 2026
- High7.2The Easy PHP Settings plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 1.0.4 via the method.Check if you run itEPSS 0.39%Mar 7, 2026
- Medium4.8The Stock Ticker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.26.1 due to insufficient…Check if you run itEPSS 0.19%Mar 7, 2026
- Medium4.8The MailArchiver plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 4.4.0 due to insufficient i…Check if you run itEPSS 0.21%Mar 7, 2026
- Medium4.3The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.9.8.2.Check if you run itEPSS 0.14%Mar 7, 2026
- Medium4.3The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to unauthorized message deletion due to a missing capability check on the pg…Check if you run itEPSS 0.23%Mar 7, 2026
- Medium6.1The CM Custom Reports plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'date_from' and 'date_to' parameters in all versions up to, and incl…Check if you run itEPSS 0.23%Mar 7, 2026
- Medium4.9The Community Events plugin for WordPress is vulnerable to SQL Injection via the 'ce_venue_name' CSV field in the function in all versions up to, and including, 1.5.8.Check if you run itEPSS 0.34%Mar 7, 2026
- High7.5The JS Archive List plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 6.1.7 via the 'included' shortcode attribute.Check if you run itEPSS 0.43%Mar 7, 2026
- Medium6.4The Hammas Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'apix' parameter in the 'hp-calendar-manage-redirect' shortcode in all ve…Check if you run itEPSS 0.21%Mar 7, 2026
- Medium5.3The MDJM Event Management plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the 'custom_fields_controller' func…Check if you run itEPSS 0.27%Mar 7, 2026
- High7.5The ZIP Code Based Content Protection plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 1.0.2 via the 'zipcode' parameter.Check if you run itEPSS 0.35%Mar 7, 2026
- Medium5.1XikeStor SKS8310-8X Network Switch firmware versions 1.04.B07 and prior contain a stored cross-site scripting vulnerability that allows authenticated attackers to inje…Check if you run itEPSS 0.19%Mar 7, 2026
- High8.6XikeStor SKS8310-8X Network Switch firmware versions 1.04.B07 and prior contain a predictable session identifier vulnerability in the /goform/SetLogin endpoint that al…Check if you run itEPSS 0.52%Mar 7, 2026
- High8.7XikeStor SKS8310-8X Network Switch firmware versions 1.04.B07 and prior contain a missing authentication vulnerability in the /switch_config.src endpoint that allows u…Check if you run itEPSS 0.54%Mar 7, 2026
Sort