Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.3wpDiscuz before 7.6.47 contains an email header injection vulnerability that allows attackers to manipulate mail recipients by injecting malicious data into the comment_author_emaiCheck if you run itEPSS 0.26%Mar 13, 2026
- Medium6.9wpDiscuz before 7.6.47 contains an information disclosure vulnerability that allows administrators to inadvertently expose OAuth secrets by exporting plugin options as JSON.Check if you run itEPSS 0.32%Mar 13, 2026
- Medium6.1wpDiscuz before 7.6.47 contains a cross-site request forgery vulnerability that allows attackers to delete all comments associated with an email address by crafting a malicious GETCheck if you run itEPSS 0.19%Mar 13, 2026
- Medium6.9wpDiscuz before 7.6.47 contains an IP spoofing vulnerability in the getIP() function that allows attackers to bypass IP-based rate limiting and ban enforcement by trusting untrusteCheck if you run itEPSS 0.18%Mar 13, 2026
- Critical9.2wpDiscuz before 7.6.47 contains an SQL injection vulnerability in the getAllSubscriptions() function where string parameters lack proper quote escaping in SQL queries.Check if you run itEPSS 0.35%Mar 13, 2026
- Medium5.1Beghelli Sicuro24 SicuroWeb contains a template injection vulnerability that allows attackers to inject arbitrary AngularJS expressions by exploiting improper rendering of untrusteCheck if you run itEPSS 0.39%Mar 13, 2026
- Medium5.3wpDiscuz before 7.6.47 contains a stored cross-site scripting vulnerability in the inline comment preview functionality that allows authenticated users to inject malicious scriptsCheck if you run itEPSS 0.20%Mar 13, 2026
- High8.7wpDiscuz before 7.6.47 contains an unauthenticated denial of service vulnerability that allows anonymous users to trigger mass notification emails by exploiting the checkNotificatiCheck if you run itEPSS 0.59%Mar 13, 2026
- Medium5.4Statamic is a Laravel and Git powered content management system (CMS).Check if you run itEPSS 0.26%Mar 12, 2026
- High7.5PyJWT is a JSON Web Token implementation in Python.Check if you run itEPSS 0.30%Mar 12, 2026
- Medium5.3soroban-sdk is a Rust SDK for Soroban contracts.Check if you run itEPSS 0.31%Mar 12, 2026
- High7.5Ella Core is a 5G core designed for private networks.Check if you run itEPSS 0.20%Mar 12, 2026
- High7.5Ella Core is a 5G core designed for private networks.Check if you run itEPSS 0.35%Mar 12, 2026
- Medium6.9OneUptime is a solution for monitoring and managing online services.Check if you run itEPSS 0.27%Mar 12, 2026
- High7.6OneUptime is a solution for monitoring and managing online services.Check if you run itEPSS 0.26%Mar 12, 2026
- Critical10.0OneUptime is a solution for monitoring and managing online services.Check if you run itEPSS 0.74%Mar 12, 2026
- Critical9.8Locutus brings stdlibs of other programming languages to JavaScript for educational purposes.Check if you run itEPSS 0.65%Mar 12, 2026
- High8.1OpenClaw is a personal AI assistant.Check if you run itEPSS 0.18%Mar 12, 2026
- Critical9.3Centrifugo is an open-source scalable real-time messaging server.Check if you run itEPSS 0.29%Mar 12, 2026
- High8.5Anchore Enterprise versions before 5.25.1 contain an SQL injection vulnerability in the GraphQL Reports API.Check if you run itEPSS 0.34%Mar 12, 2026
- High7.5undici: Undici: Denial of Service via invalid WebSocket permessage-deflate extension parameterCheck if you run itEPSS 1.00%Mar 12, 2026
- High7.5ImpactA server can reply with a WebSocket frame using the 64-bit length form and an extremely large length.Check if you run itEPSS 0.56%Mar 12, 2026
- Medium4.6ImpactWhen an application passes user-controlled input to the upgrade option of client.request(), an attacker can inject CRLF sequences (\r\n) to: * Inject arbitrary HTTP headers *Check if you run itEPSS 0.32%Mar 12, 2026
- High8.7Black is the uncompromising Python code formatter.Check if you run itEPSS 0.69%Mar 12, 2026
- Medium5.9This is an uncontrolled resource consumption vulnerability (CWE-400) that can lead to Denial of Service (DoS).Check if you run itEPSS 0.63%Mar 12, 2026
Sort