Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provides data- and project-management for neuroimaging research.Check if you run itEPSS 0.30%Apr 8, 2026
- Medium5.4The Advanced Contact form 7 DB plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.9.Check if you run itEPSS 0.14%Apr 8, 2026
- High7.5A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of parameters in the /xwgl_ref.asp endpoint.Check if you run itEPSS 0.49%Apr 8, 2026
- High7.5A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of parameters in the /xwgl_bwr.asp endpoint.Check if you run itEPSS 0.49%Apr 8, 2026
- High7.5A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of multiple parameters in the /web_post.asp endpoint.Check if you run itEPSS 0.60%Apr 8, 2026
- High7.5A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of input parameters in the /web_keyword.asp endpoint.Check if you run itEPSS 0.60%Apr 8, 2026
- High7.5A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of parameters in the /user_group.asp endpoint.Check if you run itEPSS 0.60%Apr 8, 2026
- High7.5A buffer overflow vulnerability exists in D-Link DI-8003 16.07.26A1 due to improper handling of multiple parameters in the /url_rule.asp endpoint.Check if you run itEPSS 0.60%Apr 8, 2026
- High7.5A vulnerability has been discovered in D-Link DI-8003 16.07.26A1, which can lead to a buffer overflow when the s parameter in the pppoe_list_opt.asp endpoint is manipulated.Check if you run itEPSS 0.52%Apr 8, 2026
- High7.5Saleor is an e-commerce platform.Check if you run itEPSS 0.79%Apr 8, 2026
- Medium6.5Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130).Check if you run itEPSS 0.47%Apr 8, 2026
- High7.7Server-Side Request Forgery (CWE-918) in Kibana One Workflow can lead to information disclosure.Check if you run itEPSS 0.38%Apr 8, 2026
- Medium5.5A flaw was found in Red Hat Quay's Proxy Cache configuration feature.Check if you run itEPSS 0.46%Apr 8, 2026
- High7.5D-Link DI-8003 v16.07.26A1, DI-8500 v16.07.26A1; DI-8003G v17.12.21A1, DI-8200G v17.12.20A1, DI-8200 v16.07.26A1, DI-8400 v16.07.26A1, DI-8004w v16.07.26A1, DI-8100 v1…Check if you run itEPSS 0.33%Apr 8, 2026
- Critical9.1A Server-Side Request Forgery (SSRF) vulnerability exists in the Print Format functionality of ERPNext v16.0.1 and Frappe Framework v16.1.1, where user-supplied HTML i…Check if you run itEPSS 0.42%Apr 8, 2026
- High7.5OpenAirInterface v2.2.0 accepts Security Mode Complete without any integrity protection.Check if you run itEPSS 0.35%Apr 8, 2026
- Medium6.5A flaw was found in Red Hat Quay and mirror registry for Red Hat OpenShift.Check if you run itEPSS 0.40%Apr 8, 2026
- Critical9.1QD 20230821 is vulnerable to Server-side request forgery (SSRF) via a crafted requestCheck if you run itEPSS 0.24%Apr 8, 2026
- Medium5.3Hono is a Web application framework that provides support for any JavaScript runtime.Check if you run itEPSS 0.45%Apr 8, 2026
- Medium5.3@hono/node-server allows running the Hono application on Node.js.Check if you run itEPSS 0.40%Apr 8, 2026
- High7.4In Eclipse Jetty, the class JASPIAuthenticator initiates the authentication checks, which set two ThreadLocal variable.Check if you run itEPSS 0.61%Apr 8, 2026
- Critical9.1Unauthenticated functionality in CoolerControl/coolercontrold <4.0.0 allows unauthenticated attackers to view and modify potentially sensitive data via HTTP requestsCheck if you run itEPSS 0.28%Apr 8, 2026
- Medium4.3The BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versio…Check if you run itEPSS 0.16%Apr 8, 2026
- Medium6.5The BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versio…Check if you run itEPSS 0.18%Apr 8, 2026
- Medium5.4Cross-Site Request Forgery (CSRF) vulnerability in stmcan RT-Theme 18 | Extensions rt18-extensions allows Cross Site Request Forgery.This issue affects RT-Theme 18 | E…Check if you run itEPSS 0.14%Apr 8, 2026