Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5The MasterStudy LMS WordPress Plugin for Online Courses and Education plugin for WordPress is vulnerable to Time-based Blind SQL Injection via the 'order' and 'orderby…Check if you run itEPSS 0.46%Apr 17, 2026
- Medium6.5The WP Statistics plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 14.16.4.Check if you run itEPSS 0.31%Apr 17, 2026
- Medium5.3SiYuan is an open-source personal knowledge management system.Check if you run itEPSS 0.27%Apr 17, 2026
- Medium5.9Note Mark is an open-source note-taking application.Check if you run itEPSS 0.45%Apr 17, 2026
- Low3.7Note Mark is an open-source note-taking application.Check if you run itEPSS 0.26%Apr 17, 2026
- High8.7Note Mark is an open-source note-taking application.Check if you run itEPSS 0.32%Apr 17, 2026
- Medium6.9pypdf is a free and open-source pure-python PDF library.Check if you run itEPSS 0.44%Apr 17, 2026
- High8.6Cloud Foundry UUA is vulnerable to a bypass that allows an attacker to obtain a token for any user and gain access to UAA-protected systems.Check if you run itEPSS 0.37%Apr 17, 2026
- High7.2The WP Statistics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'utm_source' parameter in all versions up to, and including, 14.16.4.Patch nowKEVEPSS 0.48%Apr 17, 2026
- Critical9.0SiYuan is an open-source personal knowledge management system.Check if you run itEPSS 0.31%Apr 16, 2026
- High8.5SiYuan is an open-source personal knowledge management system.Check if you run itEPSS 0.29%Apr 16, 2026
- High8.1SiYuan is an open-source personal knowledge management system.Check if you run itEPSS 0.41%Apr 16, 2026
- Medium6.1AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework.Check if you run itEPSS 0.26%Apr 16, 2026
- Medium6.1openCryptoki is a PKCS#11 library and provides tooling for Linux and AIX.Check if you run itEPSS 0.17%Apr 16, 2026
- Medium4.3Vision Helpdesk before 5.7.0 (patched in 5.6.10) allows attackers to read user profiles via modified serialized cookie data to vis_client_id.Check if you run itEPSS 0.18%Apr 16, 2026
- Critical9.8Paperclip: OS Command Injection via Execution Workspace cleanupCommandCheck if you run itEPSS 0.80%Apr 16, 2026
- Critical9.8protobufjs compiles protobuf definitions into JavaScript (JS) functions.Check if you run itEPSS 0.77%Apr 16, 2026
- High8.1sagredo qmail before 2026.04.07 allows tls_quit remote code execution because of popen in notlshosts_auto in qmail-remote.c.Check if you run itEPSS 0.87%Apr 16, 2026
- High8.8My Calendar is a WordPress plugin for managing calendar events.Check if you run itEPSS 0.93%Apr 16, 2026
- Medium6.9free5GC is an open-source implementation of the 5G core network.Check if you run itEPSS 0.33%Apr 16, 2026
- High8.7free5GC is an open-source implementation of the 5G core network.Check if you run itEPSS 0.44%Apr 16, 2026
- High8.7free5GC is an open-source implementation of the 5G core network.Check if you run itEPSS 0.50%Apr 16, 2026
- High8.7free5GC is an open-source implementation of the 5G core network.Check if you run itEPSS 0.39%Apr 16, 2026
- High7.5ngtcp2 is a C implementation of the IETF QUIC protocol.Check if you run itEPSS 0.79%Apr 16, 2026
- High8.7mcp-framework is a framework for building Model Context Protocol (MCP) servers.Check if you run itEPSS 0.47%Apr 16, 2026
Sort