Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7Budibase is a low code platform for creating internal tools, workflows, and admin panels.Check if you run itEPSS 0.30%Mar 9, 2026
- High8.8An issue pertaining to CWE-352: Cross-Site Request Forgery was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.Check if you run itEPSS 0.16%Mar 9, 2026
- Medium5.9Improper access control in user and role restore API endpoints in Devolutions Server 2025.3.11.0 and earlier allows a low-privileged authenticated user to restore dele…Check if you run itEPSS 0.24%Mar 9, 2026
- Medium6.9Keygraph Shannon contains a hard-coded API key in its router configuration that, when the router component is enabled and exposed, allows network attackers to authenti…Check if you run itEPSS 0.41%Mar 9, 2026
- Medium5.5A server-side request forgery (SSRF) vulnerability in IKEA Dirigera v2.866.4 allows an attacker to exfiltrate private keys by sending a crafted request.Check if you run itEPSS 0.18%Mar 9, 2026
- Critical9.8An issue pertaining to CWE-918: Server-Side Request Forgery was discovered in oslabs-beta ThermaKube master.Check if you run itEPSS 0.34%Mar 9, 2026
- High7.5The rtsock_msg_buffer() function serializes routing information into a buffer.Check if you run itEPSS 0.45%Mar 9, 2026
- High8.8A low-privileged remote attacker can trigger a stack-based buffer overflow via a crafted HTTP POST request using the ubr-network method resulting in full device compromise.Check if you run itEPSS 0.49%Mar 9, 2026
- Medium6.5A low‑privileged remote attacker can directly interact with the wwwdnload.cgi endpoint to download any resource available to administrators, including system backups a…Check if you run itEPSS 0.25%Mar 9, 2026
- Low2.0A vulnerability was detected in Comfast CF-AC100 2.6.0.8.Check this weekEPSS 11.34%Mar 9, 2026
- Low2.1A vulnerability was detected in Bytedesk up to 1.3.9.Check if you run itEPSS 0.70%Mar 9, 2026
- Low2.1A security vulnerability has been detected in Bytedesk up to 1.3.9.Check if you run itEPSS 0.71%Mar 9, 2026
- Critical9.8The Tutor LMS Pro plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 3.9.5 via the Social Login addon.Patch nowKEVEPSS 0.67%Mar 9, 2026
- Low2.1A security flaw has been discovered in EasyCMS up to 1.6.Check if you run itEPSS 0.50%Mar 8, 2026
- Low2.1A vulnerability was identified in EasyCMS up to 1.6.Check if you run itEPSS 0.50%Mar 8, 2026
- Low2.1A flaw has been found in SourceCodester Computer Laboratory Management System 1.0.Check if you run itEPSS 0.32%Mar 8, 2026
- Low2.0A security vulnerability has been detected in ContiNew Admin up to 4.2.0.Check if you run itEPSS 0.60%Mar 8, 2026
- Low2.1A vulnerability was detected in xuxueli xxl-job up to 3.3.2.Check if you run itEPSS 0.38%Mar 8, 2026
- Low3.7A vulnerability was determined in mkj Dropbear up to 2025.89.Check if you run itEPSS 0.19%Mar 8, 2026
- Low2.1A vulnerability was detected in bufanyun HotGo up to 2.0.Check if you run itEPSS 0.36%Mar 8, 2026
- Low2.1A weakness has been identified in welovemedia FFmate up to 2.0.15.Check if you run itEPSS 0.39%Mar 7, 2026
- Medium5.5Caddy is an extensible server platform that uses TLS by default.Check if you run itEPSS 0.51%Mar 7, 2026
- High8.7Netmaker makes networks with WireGuard.Check if you run itEPSS 0.29%Mar 7, 2026
- High7.5PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser.Check if you run itEPSS 0.46%Mar 7, 2026
- Critical9.1Soft Serve is a self-hostable Git server for the command line.Check if you run itEPSS 0.41%Mar 7, 2026