Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.2Gotenberg is a Docker-powered stateless API for PDF files.Check if you run itEPSS 0.44%May 14, 2026
- Critical9.8Gotenberg is a Docker-powered stateless API for PDF files.Patch nowKEVEPSS 3.67%May 14, 2026
- Critical9.2MagicMirror² is an open source modular smart mirror platform.Check if you run itEPSS 1.68%May 14, 2026
- Critical9.6soundcloud-rpc is a SoundCloud Client with Discord Rich Presence, Dark Mode, Last.fm and AdBlock support.Check if you run itEPSS 0.61%May 14, 2026
- High8.8The InfusedWoo Pro plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 5.1.2.Check if you run itEPSS 0.51%May 14, 2026
- Medium6.4The Meta Field Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tagName' block attribute in all versions up to, and including, 1.5.2 du…Check if you run itEPSS 0.26%May 14, 2026
- High7.8gitoxide is an implementation of git written in Rust.Check if you run itEPSS 0.21%May 13, 2026
- Medium6.5ShellHub is a centralized SSH gateway.Check if you run itEPSS 0.35%May 13, 2026
- High8.6Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 1.90%May 13, 2026
- High7.8protobufjs-cli is the command line add-on for protobuf.js.Check if you run itEPSS 0.19%May 13, 2026
- High8.1The coreActivity: Activity Logging for WordPress plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.0.Check if you run itEPSS 0.83%May 13, 2026
- Medium5.3The Broadstreet plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.53.1 via the get_sponsored_meta() AJAX action.Check if you run itEPSS 0.27%May 13, 2026
- Low2.3Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investigation, transparency, and verification.Check if you run itEPSS 0.27%May 12, 2026
- High8.1Lemur manages TLS certificate creation.Check if you run itEPSS 0.29%May 12, 2026
- High8.1efw4.X is an Enterprise Framework for Web.Check if you run itEPSS 0.40%May 12, 2026
- High8.2ssrfcheck is a library that checks if a string contains a potential SSRF attack.Check if you run itEPSS 0.36%May 12, 2026
- High7.7Xibo is an open source digital signage platform with a web content management system and Windows display player software.Check if you run itEPSS 0.42%May 12, 2026
- High8.4JunoClaw is an agentic AI platform built on Juno Network.Check if you run itEPSS 0.22%May 12, 2026
- Medium5.6Improper initialization in the UEFI firmware for some Intel platforms within Ring 0: Bare Metal OS may allow an information disclosure.Check if you run itEPSS 0.10%May 12, 2026
- Medium4.3The Motors – Car Dealership & Classified Listings plugin for WordPress is vulnerable to Payment Bypass via insecure user meta update in all versions up to, and includi…Check if you run itEPSS 0.22%May 12, 2026
- Medium4.3The Rate Star Review Vote - AJAX Reviews, Votes, Star Ratings plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 1.6.4.Check if you run itEPSS 0.36%May 12, 2026
- High7.7WWBN AVideo is an open source video platform.Check if you run itEPSS 0.43%May 11, 2026
- Medium5.4WWBN AVideo is an open source video platform.Check if you run itEPSS 0.26%May 11, 2026
- Low3.3An issue with app access to camera metadata was addressed with improved logic.Check if you run itEPSS 0.14%May 11, 2026
- Medium4.3Audiobookshelf is a self-hosted audiobook and podcast server.Check if you run itEPSS 0.27%May 11, 2026