Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1Glances is an open-source system cross-platform monitoring tool.Check if you run itEPSS 0.51%Mar 18, 2026
- High7.5Jenkins 2.442 through 2.554 (both inclusive), LTS 2.426.3 through LTS 2.541.2 (both inclusive) performs origin validation of requests made through the CLI WebSocket en…Check if you run itEPSS 0.46%Mar 18, 2026
- High8.1MuraCMS through 10.1.10 contains a CSRF vulnerability that allows attackers to permanently destroy all deleted content stored in the trash system through a simple CSRF attack.Check if you run itEPSS 0.13%Mar 18, 2026
- High7.1The update address CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to manipulate user address information through CSRF.Check if you run itEPSS 0.11%Mar 18, 2026
- High8.8The Trash Restore CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to restore deleted content from the trash to unauthorized locations through CSRF.Check if you run itEPSS 0.13%Mar 18, 2026
- High8.0MuraCMS through 10.1.10 contains a CSRF vulnerability in the Add To Group functionality for user management (cUsers.cfc addToGroup method) that allows attackers to esc…Check if you run itEPSS 0.13%Mar 18, 2026
- High8.8The import form CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to upload and install malicious form definitions through a CSRF attack.Check if you run itEPSS 0.17%Mar 18, 2026
- Medium6.6In Juju from version 3.0.0 through 3.6.18, when a secret owner grants permissions to a secret to a grantee, the secret owner relies exclusively on a predictable XID of…Check if you run itEPSS 0.39%Mar 18, 2026
- Medium5.4The Yoast Duplicate Post plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the clone_bulk_action_handler() a…Check if you run itEPSS 0.18%Mar 18, 2026
- High7.1A CSRF vulnerability in the Link Aggregation configuration interface allows an unauthenticated remote attacker to trick authenticated users into sending unauthorized P…Check if you run itEPSS 0.18%Mar 18, 2026
- High7.2A command injection vulnerability in the device’s Root CA certificate transfer workflow allows a high-privileged attacker to send crafted HTTP POST requests that resul…Check if you run itEPSS 1.04%Mar 18, 2026
- Medium6.5A remote attacker with user privileges for the webUI can use the setting of the TFTP Filename with a POST Request to trigger a stack-based Buffer Overflow, resulting i…Check if you run itEPSS 0.39%Mar 18, 2026
- Medium5.8A flaw was identified in Keycloak, an identity and access management solution, where it improperly follows HTTP redirects when processing certain client configuration requests.Check if you run itEPSS 0.41%Mar 18, 2026
- Medium5.3Elysia is a Typescript framework for request validation, type inference, OpenAPI documentation, and client-server communication.Check if you run itEPSS 0.34%Mar 18, 2026
- Medium5.3A flaw was found in Keycloak.Check if you run itEPSS 0.87%Mar 18, 2026
- Medium5.3The Subscriptions for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the function in all vers…Check if you run itEPSS 0.32%Mar 18, 2026
- Medium6.3Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 0.55%Mar 18, 2026
- Medium6.9Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 0.87%Mar 18, 2026
- Medium5.3Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 0.24%Mar 18, 2026
- High7.5IBM Sterling B2B Integrator and and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1, and 6.2.2.0 could allow…Check if you run itEPSS 0.35%Mar 17, 2026
- Medium5.1Edimax GS-5008PL firmware version 1.00.54 and prior contain a stored cross-site scripting vulnerability in the system_name_set.cgi script that allows attackers to inje…Check if you run itEPSS 0.30%Mar 17, 2026
- Medium5.1Edimax GS-5008PL firmware version 1.00.54 and prior contain a cross-site request forgery vulnerability that allows remote attackers to perform unauthorized administrat…Check if you run itEPSS 0.24%Mar 17, 2026
- High8.3Missing authorization checks on multiple gRPC service endpoints in PowerShell Universal before 2026.1.4 allows an authenticated user with any valid token to bypass rol…Check if you run itEPSS 0.39%Mar 17, 2026
- Medium5.5Improper input validation in the apps and endpoints configuration in PowerShell Universal before 2026.1.4 allows an authenticated user with permissions to create or mo…Check if you run itEPSS 0.41%Mar 17, 2026
- High7.5Wazuh is a free and open source platform used for threat prevention, detection, and response.Check if you run itEPSS 0.72%Mar 17, 2026