Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provides data- and project-management for neuroimaging research.Check if you run itEPSS 0.25%Apr 8, 2026
- High7.8Fleet is open source device management software.Check if you run itEPSS 0.11%Apr 8, 2026
- Medium5.3Saleor is an e-commerce platform.Check if you run itEPSS 0.25%Apr 8, 2026
- High8.4A Missing Authentication for Critical Function vulnerability in command processing of Juniper Networks Junos OS allows a privileged local attacker to gain access to Linux-based linCheck if you run itEPSS 0.14%Apr 8, 2026
- Medium4.3The Advanced Contact form 7 DB plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'vsz_cf7_export_to_excel' function in allCheck if you run itEPSS 0.32%Apr 8, 2026
- Medium5.4The Advanced Contact form 7 DB plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.9.Check if you run itEPSS 0.14%Apr 8, 2026
- Critical9.8The ProSolution WP Client plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'proSol_fileUploadProcess' function in all versionCheck if you run itEPSS 0.60%Apr 8, 2026
- Medium5.9Saleor is an e-commerce platform.Check if you run itEPSS 0.30%Apr 8, 2026
- High7.5Saleor is an e-commerce platform.Check if you run itEPSS 0.27%Apr 8, 2026
- High7.5Saleor is an e-commerce platform.Check if you run itEPSS 0.45%Apr 8, 2026
- Medium5.5A flaw was found in Red Hat Quay's Proxy Cache configuration feature.Check if you run itEPSS 0.34%Apr 8, 2026
- High8.8A flaw was found in Red Hat Quay's handling of resumable container image layer uploads.Check if you run itEPSS 0.54%Apr 8, 2026
- High7.4A flaw was found in Red Hat Quay's container image upload process.Check if you run itEPSS 0.25%Apr 8, 2026
- Critical9.8Improper Limitation of a Pathname to a Restricted Directory (CWE-22) in Logstash can lead to arbitrary file write and potentially remote code execution via Relative Path TraversalCheck if you run itEPSS 0.55%Apr 8, 2026
- High7.7Server-Side Request Forgery (CWE-918) in Kibana One Workflow can lead to information disclosure.Check if you run itEPSS 0.24%Apr 8, 2026
- Medium6.5Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130).Check if you run itEPSS 0.28%Apr 8, 2026
- Medium4.3Incorrect Authorization (CWE-863) in Kibana can lead to cross-space information disclosure via Privilege Abuse (CAPEC-122).Check if you run itEPSS 0.18%Apr 8, 2026
- Medium5.3A flaw was found in the OpenShift Mirror Registry.Check if you run itEPSS 0.29%Apr 8, 2026
- High7.7Incorrect Authorization (CWE-863) in Kibana can lead to information disclosure via Privilege Abuse (CAPEC-122).Check if you run itEPSS 0.29%Apr 8, 2026
- High7.7Execution with Unnecessary Privileges (CWE-250) in Kibana’s Fleet plugin debug route handlers can lead reading index data beyond their direct Elasticsearch RBAC scope via PrivilegeCheck if you run itEPSS 0.30%Apr 8, 2026
- Medium6.5A flaw was found in Red Hat Quay and mirror registry for Red Hat OpenShift.Check if you run itEPSS 0.41%Apr 8, 2026
- High7.5rfc3161-client is a Python library implementing the Time-Stamp Protocol (TSP) described in RFC 3161.Check if you run itEPSS 0.19%Apr 8, 2026
- High7.2An eval() injection vulnerability in the Rapid7 Insight Agent beaconing logic for Linux versions could theoretically allow an attacker to achieve remote code execution as root viaCheck if you run itEPSS 0.42%Apr 8, 2026
- Medium5.9Axios is a promise based HTTP client for the browser and Node.js.Check if you run itEPSS 0.74%Apr 8, 2026
- Medium4.8Hono is a Web application framework that provides support for any JavaScript runtime.Check if you run itEPSS 0.29%Apr 8, 2026
Sort