Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Active Support is a toolkit of support libraries and Ruby core extensions extracted from the Rails framework.Check if you run itEPSS 0.35%Mar 24, 2026
- Medium6.9Active Support is a toolkit of support libraries and Ruby core extensions extracted from the Rails framework.Check if you run itEPSS 0.67%Mar 24, 2026
- High7.5ipmi-oem in FreeIPMI before 1.6.17 has exploitable buffer overflows on response messages.Check if you run itEPSS 0.43%Mar 24, 2026
- Critical9.6Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines.Check if you run itEPSS 0.60%Mar 23, 2026
- High8.0Active Storage allows users to attach cloud and local files in Rails applications.Check if you run itEPSS 0.59%Mar 23, 2026
- High8.1The Contest Gallery plugin for WordPress is vulnerable to an authentication bypass leading to admin account takeover in all versions up to, and including, 28.1.5.Check if you run itEPSS 0.46%Mar 23, 2026
- Medium5.4The User Registration & Membership plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the Content Access Rules REST API enCheck if you run itEPSS 0.19%Mar 23, 2026
- High8.8The Jupiter X Core plugin for WordPress is vulnerable to limited file uploads due to missing authorization on import_popup_templates() function as well as insufficient file type vaCheck if you run itEPSS 0.70%Mar 23, 2026
- Critical9.8Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')Patch nowKEVEPSS 0.90%Mar 23, 2026
- Low2.3Action View provides conventions and helpers for building web pages with the Rails framework.Check if you run itEPSS 0.69%Mar 23, 2026
- Low1.3Action Pack is a Rubygem for building web applications on the Rails framework.Check if you run itEPSS 0.27%Mar 23, 2026
- High7.7Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask.Check if you run itEPSS 0.81%Mar 23, 2026
- High7.5The WP Job Portal plugin for WordPress is vulnerable to SQL Injection via the 'radius' parameter in all versions up to, and including, 2.4.8 due to insufficient escaping on the useCheck if you run itEPSS 0.43%Mar 23, 2026
- Medium4.3The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to unauthorized deletion of quiz question answers due to a missing capability check in the delete_question_Check if you run itEPSS 0.27%Mar 23, 2026
- Medium4.3The Smart Custom Fields plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the relational_posts_search() function in all versionCheck if you run itEPSS 0.31%Mar 23, 2026
- Medium6.5The Quiz and Survey Master (QSM) plugin for WordPress is vulnerable to SQL Injection via the 'merged_question' parameter in all versions up to, and including, 10.3.5.Check if you run itEPSS 0.34%Mar 23, 2026
- Critical9.3A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill and PTC FlexPLM.Check if you run itEPSS 0.73%Mar 23, 2026
- Medium5.5A vulnerability has been found in itsourcecode Free Hotel Reservation System 1.0.Check if you run itEPSS 0.27%Mar 23, 2026
- High8.6A flaw has been found in TOTOLINK X6000R 9.4.0cu.1360_B20241207/9.4.0cu.1498_B20250826.Check if you run itEPSS 3.16%Mar 23, 2026
- High8.1Connect-CMS is a content management system.Check if you run itEPSS 0.32%Mar 23, 2026
- High7.5Connect-CMS is a content management system.Check if you run itEPSS 0.28%Mar 23, 2026
- Medium6.8Connect-CMS is a content management system.Check if you run itEPSS 0.37%Mar 23, 2026
- Medium4.8Connect-CMS is a content management system.Check if you run itEPSS 0.21%Mar 23, 2026
- High8.7Connect-CMS is a content management system.Check if you run itEPSS 0.34%Mar 23, 2026
- High8.8Connect-CMS is a content management system.Check if you run itEPSS 0.48%Mar 23, 2026
Sort