Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3fast-jwt provides fast JSON Web Token (JWT) implementation.Check if you run itEPSS 0.63%Apr 9, 2026
- High7.5Use of GET Request Method With Sensitive Query Strings vulnerability in Apache OpenMeetings.Check if you run itEPSS 0.79%Apr 9, 2026
- High7.5A memory exhaustion vulnerability exists in the HTTP server due to unbounded use of the header.Check if you run itEPSS 0.94%Apr 9, 2026
- High7.5A gzip decompression bomb vulnerability exists when Orthanc processes HTTP request with .Check if you run itEPSS 0.76%Apr 9, 2026
- Medium4.3Cross Site Request Forgery vulnerability in Phpbb phbb3 v.3.3.15 allows a local attacker to execute arbitrary code via the Admin Control Panel icon management functionality.Check if you run itEPSS 0.15%Apr 9, 2026
- High8.8Cross Site Request Forgery vulnerability in Phpbb phbb3 v.3.3.15 allows a local attacker to execute arbitrary code via the login function and the authentication mechanismCheck if you run itEPSS 0.25%Apr 9, 2026
- High7.0Axios is a promise based HTTP client for the browser and Node.js.Check if you run itEPSS 1.19%Apr 9, 2026
- Critical9.1Jizhicms v2.5.4 is vulnerable to Server-Side Request Forgery (SSRF) in User Evaluation, Message, and Comment modules.Check if you run itEPSS 0.27%Apr 9, 2026
- Medium6.5Mattermost Plugins versions <=2.1.3.0 fail to limit the request body size on the {{/changes}} webhook endpoint which allows an authenticated attacker to cause memory e…Check if you run itEPSS 0.31%Apr 9, 2026
- Medium6.5Mattermost Plugins versions <=2.3.1 fail to limit the request body size on the {{/lifecycle}} webhook endpoint which allows an authenticated attacker to cause memory e…Check if you run itEPSS 0.31%Apr 9, 2026
- Critical9.1In Canonical LXD versions 4.12 through 6.7, the doCertificateUpdate function in lxd/certificates.go does not validate the Type field when handling PUT/PATCH requests t…Check if you run itEPSS 0.42%Apr 9, 2026
- Low1.9A security vulnerability has been detected in awwaiid mcp-server-taskwarrior up to 1.0.1.Check if you run itEPSS 1.08%Apr 9, 2026
- Medium5.5A weakness has been identified in atototo api-lab-mcp up to 0.2.1.Check if you run itEPSS 0.50%Apr 9, 2026
- Medium5.5A vulnerability has been found in code-projects Simple IT Discussion Forum 1.0.Check if you run itEPSS 0.41%Apr 9, 2026
- High7.1OpenClaw before 2026.3.31 (patched in 2026.4.8) contains a request body replay vulnerability in fetchWithSsrFGuard that allows unsafe request bodies to be resent acros…Check if you run itEPSS 0.55%Apr 8, 2026
- Low2.1A security flaw has been discovered in bigsk1 openai-realtime-ui up to 188ccde27fdf3d8fab8da81f3893468f53b2797c.Check if you run itEPSS 0.37%Apr 8, 2026
- High8.1The MW WP Form plugin for WordPress is vulnerable to Arbitrary File Move/Read in all versions up to and including 5.1.1.Check if you run itEPSS 0.92%Apr 8, 2026
- High7.5FrontMCP is a TypeScript-first framework for the Model Context Protocol (MCP).Check if you run itEPSS 0.42%Apr 8, 2026
- Medium5.3Frappe Learning Management System (LMS) is a learning system that helps users structure their content.Check if you run itEPSS 0.28%Apr 8, 2026
- Medium5.3InvenTree is an Open Source Inventory Management System.Check if you run itEPSS 0.30%Apr 8, 2026
- High8.2LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript.Check if you run itEPSS 0.52%Apr 8, 2026
- High8.1InvenTree is an Open Source Inventory Management System.Check if you run itEPSS 0.43%Apr 8, 2026
- Medium4.3InvenTree is an Open Source Inventory Management System.Check if you run itEPSS 0.24%Apr 8, 2026
- High7.5A denial of service vulnerability exists in React Server Components, affecting the following packages: react-server-dom-parcel, react-server-dom-turbopack and react-se…Check if you run itEPSS 1.55%Apr 8, 2026
- Medium5.3Saleor is an e-commerce platform.Check if you run itEPSS 0.42%Apr 8, 2026