Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7Hisilicon HiIpcam V100R003 contains a directory traversal vulnerability that allows unauthenticated attackers to access sensitive configuration files by exploiting dir…Check if you run itEPSS 0.51%Mar 11, 2026
- Critical9.3Epross AVCON6 systems management platform contains an object-graph navigation language (OGNL) injection vulnerability that allows unauthenticated attackers to execute…Check if you run itEPSS 0.40%Mar 11, 2026
- Critical9.3Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.57%Mar 11, 2026
- Medium6.3Craft Commerce is an ecommerce platform for Craft CMS.Check if you run itEPSS 0.33%Mar 11, 2026
- High7.5flagd is a feature flag daemon with a Unix philosophy.Check if you run itEPSS 0.60%Mar 11, 2026
- Critical9.3Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.57%Mar 11, 2026
- Critical9.8Jellyfin is an open-source media system.Check if you run itEPSS 0.65%Mar 11, 2026
- High8.1OPNsense is a FreeBSD based firewall and routing platform.Check if you run itEPSS 0.20%Mar 11, 2026
- Medium6.3In Splunk Enterprise versions below 10.2.0, 10.0.3, 9.4.9, and 9.3.9, and Splunk Cloud Platform versions below 10.2.2510.4, 10.1.2507.15, 10.0.2503.11, and 9.3.2411.12…Check if you run itEPSS 0.21%Mar 11, 2026
- Critical9.8A remote code execution (RCE) vulnerability in OpenClaw Agent Platform v2026.2.6 allows attackers to execute arbitrary code via a Request-Side prompt injection attack.Check if you run itEPSS 1.23%Mar 11, 2026
- High7.5Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes.Check if you run itEPSS 0.81%Mar 11, 2026
- High7.5An issue pertaining to CWE-918: Server-Side Request Forgery was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.Check if you run itEPSS 0.28%Mar 11, 2026
- High7.5When doing a second SMB request to the same host again, curl would wrongly use a data pointer pointing into already freed memory.Check if you run itEPSS 0.99%Mar 11, 2026
- Medium6.5curl would wrongly reuse an existing HTTP proxy connection doing CONNECT to a server, even if the new request uses different credentials for the HTTP proxy.Check if you run itEPSS 0.47%Mar 11, 2026
- Medium5.3When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer performs a redirect to a second URL, curl could leak that token to the second hostname under some cirCheck if you run itEPSS 0.53%Mar 11, 2026
- Medium6.5libcurl can in some circumstances reuse the wrong connection when asked to do an Negotiate-authenticated HTTP or HTTPS request.Check if you run itEPSS 0.26%Mar 11, 2026
- Medium4.3The Modular DS: Monitor, update, and backup multiple websites plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.5.1.Check if you run itEPSS 0.15%Mar 11, 2026
- High7.5The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to blind SQL Injection in all versions up to, and inc…Check if you run itEPSS 0.41%Mar 11, 2026
- Medium6.4The weForms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the REST API entry submission endpoint in all versions up to, and including, 1.6.27.Check if you run itEPSS 0.39%Mar 11, 2026
- High8.1The ProfilePress plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.16.11.Check if you run itEPSS 0.52%Mar 11, 2026
- Medium5.5Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerabilit…Check if you run itEPSS 0.24%Mar 11, 2026
- Medium5.5Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerabilit…Check if you run itEPSS 0.24%Mar 11, 2026
- Medium6.1The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.2.7.Check if you run itEPSS 0.10%Mar 11, 2026
- Medium5.0GitLab has remediated an issue in GitLab CE/EE affecting all versions from 8.11 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an au…Check if you run itEPSS 0.33%Mar 11, 2026
- High7.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.9 before 18.9.2 that could have allowed an unauthenticated user to cause a denial of serv…Check if you run itEPSS 0.41%Mar 11, 2026