Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3).Check if you run itEPSS 0.53%Apr 14, 2026
- Critical9.1The LearnPress plugin for WordPress is vulnerable to unauthorized data deletion due to a missing capability check on the function in all versions up to, and including,…Check if you run itEPSS 0.85%Apr 14, 2026
- Medium4.3Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Check if you run itEPSS 0.30%Apr 14, 2026
- Medium5.3nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm.Check if you run itEPSS 0.52%Apr 14, 2026
- Low2.0A vulnerability was identified in HummerRisk up to 1.5.0.Check if you run itEPSS 0.38%Apr 13, 2026
- Low3.1EspoCRM is an open source customer relationship management application.Check if you run itEPSS 0.40%Apr 13, 2026
- High7.7Craft Commerce is an ecommerce platform for Craft CMS.Check if you run itEPSS 0.60%Apr 13, 2026
- Low2.1A weakness has been identified in DbGate up to 7.1.4.Check if you run itEPSS 0.34%Apr 13, 2026
- Medium4.3EspoCRM is an open source customer relationship management application.Check if you run itEPSS 1.68%Apr 13, 2026
- High7.1Pachno 1.0.6 contains an authentication bypass vulnerability in the runSwitchUser() action that allows authenticated low-privilege users to escalate privileges by mani…Check if you run itEPSS 0.53%Apr 13, 2026
- Medium5.3Pachno 1.0.6 contains a cross-site request forgery vulnerability that allows attackers to perform arbitrary actions in authenticated user context by exploiting missing…Check if you run itEPSS 0.15%Apr 13, 2026
- Medium5.1Pachno 1.0.6 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary HTML and script code by injecting malicious payloads into…Check if you run itEPSS 0.26%Apr 13, 2026
- High7.4A weakness has been identified in Totolink A3002MU B20211125.1046.Check if you run itEPSS 0.79%Apr 13, 2026
- Medium5.8An issue was discovered in HAProxy before 3.3.6.Check if you run itEPSS 0.58%Apr 13, 2026
- Low2.7Sourcecodester Online Reviewer System v1.0 is vulnerable to SQL Injection in the file /system/system/admins/assessments/examproper/questions-view.php.Check if you run itEPSS 0.32%Apr 13, 2026
- High7.1Server-Side Request Forgery via SW-URL Header vulnerability in Apache SkyWalking MCP.Check if you run itEPSS 0.54%Apr 13, 2026
- Critical9.8An attacker can control a server-side HTTP request by supplying a crafted URL, causing the server to initiate requests to arbitrary destinations.Check if you run itEPSS 0.34%Apr 13, 2026
- High7.5Varnish Cache 9 before 9.0.1 allows a "workspace overflow" denial of service (daemon panic) after timeout_linger.Check if you run itEPSS 0.45%Apr 12, 2026
- High7.5Varnish Enterprise before 6.0.16r12 allows a "workspace overflow" denial of service (daemon panic) for shared VCL.Check if you run itEPSS 0.40%Apr 12, 2026
- High7.5Varnish Cache 9 before 9.0.1 and Varnish Enterprise before 6.0.16r11 allows a "workspace overflow" denial of service (daemon panic) for certain amounts of prefetched data.Check if you run itEPSS 0.40%Apr 12, 2026
- High7.1MyT-PM 1.5.1 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the Charg…Check if you run itEPSS 0.28%Apr 12, 2026
- Medium5.3Heatmiser Wifi Thermostat 1.7 contains a cross-site request forgery vulnerability that allows attackers to change administrator credentials by tricking authenticated u…Check if you run itEPSS 0.13%Apr 12, 2026
- High7.1eBrigade ERP 4.5 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the '…Check if you run itEPSS 0.27%Apr 12, 2026
- High8.7Across DR-810 contains an unauthenticated file disclosure vulnerability that allows remote attackers to download the rom-0 backup file containing sensitive information…Check if you run itEPSS 0.53%Apr 12, 2026
- High7.1ImpressCMS 1.3.11 contains a time-based blind SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code thro…Check if you run itEPSS 0.34%Apr 12, 2026