Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1A security vulnerability has been detected in DbGate up to 7.1.4.Check if you run itEPSS 0.20%Apr 13, 2026
- Low1.7Craft Commerce is an ecommerce platform for Craft CMS.Check if you run itEPSS 0.31%Apr 13, 2026
- Medium5.4EspoCRM is an open source customer relationship management application.Check if you run itEPSS 0.18%Apr 13, 2026
- UnknownCGA-fv2m-653v-h78gOpen the advisoryApr 13, 2026
- High7.4A vulnerability has been found in Tenda F456 1.0.0.5.Check if you run itEPSS 0.46%Apr 13, 2026
- Medium5.3A security flaw has been discovered in code-projects Easy Blog Site 1.0.Check if you run itEPSS 0.20%Apr 13, 2026
- Medium5.3A vulnerability was identified in CodeAstro Online Job Portal 1.0.Check if you run itEPSS 0.34%Apr 13, 2026
- High7.5nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm.Check if you run itEPSS 0.47%Apr 13, 2026
- High8.7A vulnerability was determined in Tenda F456 1.0.0.5.Check if you run itEPSS 0.46%Apr 13, 2026
- High8.7A vulnerability was found in Tenda F456 1.0.0.5.Check if you run itEPSS 0.48%Apr 13, 2026
- Critical9.3Pachno 1.0.6 contains a deserialization vulnerability that allows unauthenticated attackers to execute arbitrary code by injecting malicious serialized objects into cache files.Check if you run itEPSS 0.49%Apr 13, 2026
- High7.1Pachno 1.0.6 contains an authentication bypass vulnerability in the runSwitchUser() action that allows authenticated low-privilege users to escalate privileges by manipulating theCheck if you run itEPSS 0.39%Apr 13, 2026
- Critical9.3Pachno 1.0.6 contains an XML external entity injection vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting unsafe XML parsing in the TextParseCheck if you run itEPSS 0.38%Apr 13, 2026
- Medium5.3Pachno 1.0.6 contains a cross-site request forgery vulnerability that allows attackers to perform arbitrary actions in authenticated user context by exploiting missing CSRF protectCheck if you run itEPSS 0.11%Apr 13, 2026
- High8.7Pachno 1.0.6 contains an unrestricted file upload vulnerability that allows authenticated users to upload arbitrary file types by bypassing ineffective extension filtering to the /Check if you run itEPSS 0.48%Apr 13, 2026
- High7.1Pachno 1.0.6 contains an open redirection vulnerability that allows attackers to redirect users to arbitrary external websites by manipulating the return_to parameter.Check if you run itEPSS 0.34%Apr 13, 2026
- Medium5.1Pachno 1.0.6 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary HTML and script code by injecting malicious payloads into POST parameteCheck if you run itEPSS 0.16%Apr 13, 2026
- High8.7A flaw has been found in Tenda F456 1.0.0.5.Check if you run itEPSS 0.56%Apr 13, 2026
- High8.2jq is a command-line JSON processor.Check if you run itEPSS 0.80%Apr 13, 2026
- High8.7A vulnerability was detected in Tenda F456 1.0.0.5.Check if you run itEPSS 0.58%Apr 13, 2026
- UnknownCGA-m874-rh4q-pgvxOpen the advisoryApr 13, 2026
- Critical9.3A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024.Check this weekEPSS 13.74%Apr 13, 2026
- Medium5.5A security flaw has been discovered in PHPGurukul Daily Expense Tracking System 1.1.Check if you run itEPSS 0.26%Apr 13, 2026
- Low2.1A vulnerability was determined in itsourcecode Construction Management System 1.0.Check if you run itEPSS 0.20%Apr 13, 2026
- Critical9.3Decidim is a participatory democracy framework.Check if you run itEPSS 0.37%Apr 13, 2026
Sort