Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8CMSsite 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the cat_id parameter.Check if you run itEPSS 0.41%Apr 12, 2026
- High7.1ResourceSpace 8.6 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the…Check if you run itEPSS 0.16%Apr 12, 2026
- Low2.1A vulnerability was identified in AstrBotDevs AstrBot up to 4.22.1.Check if you run itEPSS 0.35%Apr 12, 2026
- Low2.1A security flaw has been discovered in FoundationAgents MetaGPT up to 0.8.1.Check if you run itEPSS 0.37%Apr 12, 2026
- Low2.1A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.1.Check if you run itEPSS 0.29%Apr 12, 2026
- Unknownusememos memos Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 2.93%Apr 12, 2026
- UnknownNETGEAR dgn2200_firmware Improper AuthenticationPatch nowKEVEPSS 2.11%Apr 12, 2026
- High7.1The wpForo Forum plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to and including 3.0.2.Check if you run itEPSS 0.63%Apr 11, 2026
- High7.2The Optimole – Optimize Images | Convert WebP & AVIF | CDN & Lazy Load | Image Optimization plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all ve…Check if you run itEPSS 0.42%Apr 11, 2026
- Medium5.0The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP plugin for WordPress is vulnerable to blind Server-Side Request F…Check if you run itEPSS 0.45%Apr 11, 2026
- Medium4.3The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.9.7.Check if you run itEPSS 0.34%Apr 11, 2026
- Medium5.4The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthorized private course enrollment in all versions up to, and including, 3.9.7.Check if you run itEPSS 0.39%Apr 11, 2026
- Medium6.3The frontend gRPC server's streaming interceptor chain did not include the authorization interceptor.Check if you run itEPSS 0.66%Apr 10, 2026
- Medium5.3FastGPT is an AI Agent building platform.Check if you run itEPSS 0.44%Apr 10, 2026
- Medium6.5Arcane is an interface for managing Docker containers, images, networks, and volumes.Patch nowKEVEPSS 0.72%Apr 10, 2026
- High8.2Postiz is an AI social media scheduling tool.Check if you run itEPSS 0.52%Apr 10, 2026
- Medium5.3GeoNode versions 4.4.5 and 5.0.2 (and prior within their respective releases) contain a server-side request forgery vulnerability in the service registration endpoint…Check if you run itEPSS 0.27%Apr 10, 2026
- Medium5.3GeoNode versions 4.0 before 4.4.5 and 5.0 before 5.0.2 contain a server-side request forgery vulnerability that allows authenticated users with document upload permiss…Check if you run itEPSS 0.37%Apr 10, 2026
- High7.7Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts.Check if you run itEPSS 0.40%Apr 10, 2026
- High7.8Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts.Check if you run itEPSS 0.40%Apr 10, 2026
- Medium5.3Chamilo LMS is a learning management system.Check if you run itEPSS 0.41%Apr 10, 2026
- High7.1Chamilo LMS is a learning management system.Check if you run itEPSS 0.43%Apr 10, 2026
- High8.8Chamilo LMS is a learning management system.Check if you run itEPSS 0.56%Apr 10, 2026
- Medium5.4Chamilo LMS is a learning management system.Check if you run itEPSS 0.24%Apr 10, 2026
- Medium6.5Chamilo LMS is a learning management system.Check if you run itEPSS 0.40%Apr 10, 2026