Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.7The wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to,…Check if you run itEPSS 0.24%Apr 20, 2026
- Critical9.8Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to version 2.43 with a format width specifier with an expl…Check if you run itEPSS 0.72%Apr 20, 2026
- Critical9.2Vvveb CMS v1.0.8.2 contains a remote code execution vulnerability in its media management functionality where a missing return statement in the file rename handler all…Check if you run itEPSS 0.91%Apr 20, 2026
- Low2.0A weakness has been identified in Pagekit CMS up to 1.0.18.Check if you run itEPSS 0.41%Apr 20, 2026
- Medium5.1Vvveb prior to 1.0.8.1 contains a stored cross-site scripting vulnerability that allows authenticated users with media upload and rename permissions to execute arbitra…Check if you run itEPSS 0.48%Apr 20, 2026
- High8.1ChurchCRM is an open-source church management system.Check if you run itEPSS 0.23%Apr 18, 2026
- Medium5.3Python-Multipart is a streaming multipart parser for Python.Check if you run itEPSS 0.42%Apr 18, 2026
- Medium5.1The Sentry kernel is a high security level micro-kernel implementation made for high security embedded systems.Check if you run itEPSS 0.16%Apr 18, 2026
- High7.5zrok is software for sharing web services, files, and network resources.Check if you run itEPSS 0.59%Apr 17, 2026
- Medium6.1zrok is software for sharing web services, files, and network resources.Check if you run itEPSS 0.26%Apr 17, 2026
- High8.7xrdp is an open source RDP server.Check if you run itEPSS 1.04%Apr 17, 2026
- High8.7xrdp is an open source RDP server.Check if you run itEPSS 0.86%Apr 17, 2026
- High8.8In products of the MSE6 product-family by Festo a remote authenticated, low privileged attacker could use functions of undocumented test mode which could lead to a com…Check if you run itEPSS 0.64%Apr 16, 2026
- Medium6.6Drupal core - Moderately critical - Gadget Chain - SA-CORE-2026-002Check if you run itEPSS 0.42%Apr 15, 2026
- Medium4.3The Avada (Fusion) Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.15.1.Check if you run itEPSS 0.28%Apr 15, 2026
- Medium5.4The Avada (Fusion) Builder plugin for WordPress is vulnerable to Arbitrary WordPress Action Execution in all versions up to, and including, 3.15.1.Check if you run itEPSS 0.31%Apr 15, 2026
- Critical9.3Jellyfin is an open source self hosted media server.Check if you run itEPSS 0.52%Apr 14, 2026
- High8.8Chamilo LMS is an open-source learning management system.Check if you run itEPSS 0.44%Apr 14, 2026
- High8.8Chamilo LMS is an open-source learning management system.Check if you run itEPSS 2.63%Apr 14, 2026
- High7.1Chamilo LMS is an open-source learning management system.Check if you run itEPSS 0.36%Apr 14, 2026
- Medium6.5Chamilo LMS is an open-source learning management system.Check if you run itEPSS 0.39%Apr 14, 2026
- Medium5.1Chamilo LMS is an open-source learning management system.Check if you run itEPSS 0.30%Apr 14, 2026
- High8.6Chamilo LMS is an open-source learning management system.Check if you run itEPSS 0.57%Apr 14, 2026
- High7.2Chamilo LMS is an open-source learning management system.Check if you run itEPSS 0.35%Apr 14, 2026
- High7.1Chamilo is an open-source learning management system (LMS).Check if you run itEPSS 0.46%Apr 14, 2026