Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3XikeStor SKS8310-8X Network Switch firmware versions 1.04.B07 and prior contain an OS command injection vulnerability in the /goform/PingTestSet endpoint that allows u…Check if you run itEPSS 3.12%Mar 7, 2026
- Medium5.3The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 12.8.3.Check if you run itEPSS 0.32%Mar 7, 2026
- Medium4.3The HUMN-1 AI Website Scanner & Human Certification by Winston AI plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability c…Check if you run itEPSS 0.29%Mar 7, 2026
- Medium4.3The WP Frontend Profile plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.8.Check if you run itEPSS 0.17%Mar 7, 2026
- High7.5Plane is an an open-source project management tool.Check if you run itEPSS 0.39%Mar 6, 2026
- High8.5Plane is an an open-source project management tool.Check if you run itEPSS 0.35%Mar 6, 2026
- Low2.7Mercurius is a GraphQL adapter for Fastify.Check if you run itEPSS 0.38%Mar 6, 2026
- Medium5.1Group-Office is an enterprise customer relationship management and groupware tool.Check if you run itEPSS 0.29%Mar 6, 2026
- Low2.1Group-Office is an enterprise customer relationship management and groupware tool.Check if you run itEPSS 0.24%Mar 6, 2026
- Medium6.1Actions which insert URLs into the content attribute of HTML meta tags are not escaped.Check if you run itEPSS 0.34%Mar 6, 2026
- Low2.5On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference a file outside of the Root in whic…Check if you run itEPSS 0.21%Mar 6, 2026
- Medium5.9Certificate verification can panic when a certificate in the chain has an empty DNS name and another certificate in the chain has excluded name constraints.Check if you run itEPSS 0.36%Mar 6, 2026
- High7.5crypto/x509: Incorrect enforcement of email constraints in crypto/x509Check if you run itEPSS 0.63%Mar 6, 2026
- Medium6.9Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.35%Mar 6, 2026
- Medium4.3OliveTin gives access to predefined shell commands from a web interface.Check if you run itEPSS 0.43%Mar 6, 2026
- Medium6.0Flare is a Next.js-based, self-hostable file sharing platform that integrates with screenshot tools.Check if you run itEPSS 0.29%Mar 6, 2026
- High8.2Flare is a Next.js-based, self-hostable file sharing platform that integrates with screenshot tools.Check if you run itEPSS 0.39%Mar 6, 2026
- High8.5Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.40%Mar 6, 2026
- Medium6.9Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.34%Mar 6, 2026
- Medium6.9MimeKit is a C# library which may be used for the creation and parsing of messages using the Multipurpose Internet Mail Extension (MIME), as defined by numerous IETF s…Check if you run itEPSS 1.13%Mar 6, 2026
- Medium4.3OliveTin gives access to predefined shell commands from a web interface.Check if you run itEPSS 0.43%Mar 6, 2026
- Medium5.4OliveTin gives access to predefined shell commands from a web interface.Check if you run itEPSS 0.31%Mar 6, 2026
- High8.8OliveTin gives access to predefined shell commands from a web interface.Check if you run itEPSS 0.31%Mar 6, 2026
- High7.5stellar-xdr is a library and CLI containing types and functionality for working with Stellar XDR.Check if you run itEPSS 0.21%Mar 6, 2026
- Medium6.5Agentgateway is an open source data plane for agentic AI connectivity within or across any agent framework or environment.Check if you run itEPSS 0.15%Mar 6, 2026
Sort