Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Discourse is an open-source discussion platform.Check if you run itEPSS 0.99%Mar 19, 2026
- High8.6Server-side request forgery (ssrf) in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 1.01%Mar 19, 2026
- Critical10.0Server-side request forgery (ssrf) in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 1.13%Mar 19, 2026
- Critical9.9Server-side request forgery (ssrf) in Microsoft Exchange allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.74%Mar 19, 2026
- High7.5Server-side request forgery (ssrf) in Microsoft Bing allows an unauthorized attacker to perform tampering over a network.Check if you run itEPSS 0.83%Mar 19, 2026
- Medium6.5OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.40%Mar 19, 2026
- Critical9.2OPEXUS eComplaint and eCASE before version 10.1.0.0 include the secret verification code in the HTTP response when requesting a password reset via 'ForcePasswordReset.aspx'.Check if you run itEPSS 0.54%Mar 19, 2026
- High7.5The backend database management connection test feature in wgcloud v3.6.3 has a server-side request forgery (SSRF) vulnerability.Check if you run itEPSS 0.42%Mar 19, 2026
- Medium5.3BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a blind server-side request forgery vulnerability in the externalfeed/RSS API component that allows…Check this weekEPSS 12.92%Mar 19, 2026
- Medium5.3BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a blind server-side request forgery vulnerability in the searchWeb API component that allows authent…Check this weekEPSS 17.43%Mar 19, 2026
- High8.6Improper Restriction of XML External Entity Reference vulnerability in XMLUtils.java in Slovensko.Digital Autogram allows remote unauthenticated attacker to conduct SS…Check if you run itEPSS 0.53%Mar 19, 2026
- Medium4.3The Add Custom Fields to Media plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.3.Check if you run itEPSS 0.20%Mar 19, 2026
- Medium5.3OpenClaw versions prior to 2026.3.1 contain a server-side request forgery vulnerability in web_search citation redirect resolution that uses a private-network-allowing SSRF policy.Check if you run itEPSS 0.31%Mar 19, 2026
- High8.7OpenClaw versions prior to 2026.3.1 contain an unbounded memory growth vulnerability in the Zalo webhook endpoint that allows unauthenticated attackers to trigger in-m…Check if you run itEPSS 0.64%Mar 19, 2026
- Medium6.3OpenClaw versions prior to 2026.2.25 lack durable replay state for Nextcloud Talk webhook events, allowing valid signed webhook requests to be replayed without suppression.Check if you run itEPSS 0.49%Mar 19, 2026
- Medium6.5PX4 is an open-source autopilot stack for drones and unmanned vehicles.Check if you run itEPSS 0.34%Mar 19, 2026
- High8.6Kan is an open-source project management tool.Patch nowKEVEPSS 1.74%Mar 19, 2026
- High8.7Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.63%Mar 18, 2026
- Low2.3Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.26%Mar 18, 2026
- Medium5.3Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.52%Mar 18, 2026
- Medium6.0Devise is an authentication solution for Rails based on Warden.Check if you run itEPSS 0.35%Mar 18, 2026
- Low2.7StudioCMS is a server-side-rendered, Astro native, headless content management system.Check if you run itEPSS 0.39%Mar 18, 2026
- Critical9.3OmniGen2-RL contains an unauthenticated remote code execution vulnerability in the reward server component that allows remote attackers to execute arbitrary commands b…Check if you run itEPSS 1.71%Mar 18, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on node footer in {read,write}_end_io -----------[ cut here ]---------…Check if you run itEPSS 0.12%Mar 18, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: io_uring/rw: free potentially allocated iovec on cache put failure If a read/write request goes thr…Check if you run itEPSS 0.12%Mar 18, 2026