Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5SQL injection in Solicitante::resetaSenha() in esiclivre/esiclivre v0.2.2 and earlier allows unauthenticated remote attackers to gain unauthorized access to sensitive information vCheck if you run itEPSS 0.56%Mar 24, 2026
- High7.5An issue in Free5GC v.4.2.0 and before allows a remote attacker to cause a denial of service via the function HandleAuthenticationFailure of the component AMFCheck if you run itEPSS 0.42%Mar 24, 2026
- Medium5.4JiZhiCMS v2.5.6 and before contains a Stored Cross-Site Scripting (XSS) vulnerability in the release function within app/home/c/UserController.php.Check if you run itEPSS 0.18%Mar 24, 2026
- High8.8DedeCMS v5.7.118 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability in /sys_task_add.php.Check if you run itEPSS 0.15%Mar 24, 2026
- Medium4.3WPGraphQL provides a GraphQL API for WordPress sites.Check if you run itEPSS 0.19%Mar 23, 2026
- Critical9.6Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines.Check if you run itEPSS 0.60%Mar 23, 2026
- Critical9.1Graphiti is a framework that sits on top of models and exposes them via a JSON:API-compliant interface.Check if you run itEPSS 0.66%Mar 23, 2026
- High7.5Ella Core is a 5G core designed for private networks.Check if you run itEPSS 0.39%Mar 23, 2026
- High7.5Ella Core is a 5G core designed for private networks.Check if you run itEPSS 0.42%Mar 23, 2026
- High7.5Ella Core is a 5G core designed for private networks.Check if you run itEPSS 0.42%Mar 23, 2026
- High7.1The Go MCP SDK used Go's standard encoding/json.Check if you run itEPSS 0.18%Mar 23, 2026
- High8.7Salvo is a Rust web framework.Check if you run itEPSS 0.45%Mar 23, 2026
- High7.5Salvo is a Rust web framework.Check if you run itEPSS 0.59%Mar 23, 2026
- Medium6.9A vulnerability was identified in SourceCodester Online Catering Reservation 1.0.Check if you run itEPSS 0.34%Mar 23, 2026
- Medium5.3A vulnerability was determined in itsourcecode sanitize or validate this input 1.0.Check if you run itEPSS 0.20%Mar 23, 2026
- High7.5Freeciv21 is a free open source, turn-based, empire-building strategy game.Check if you run itEPSS 0.87%Mar 23, 2026
- Medium6.6Active Storage allows users to attach cloud and local files in Rails applications.Check if you run itEPSS 0.69%Mar 23, 2026
- High8.0Active Storage allows users to attach cloud and local files in Rails applications.Check if you run itEPSS 0.59%Mar 23, 2026
- Medium6.6Active Support is a toolkit of support libraries and Ruby core extensions extracted from the Rails framework.Check if you run itEPSS 0.88%Mar 23, 2026
- High8.1The Contest Gallery plugin for WordPress is vulnerable to an authentication bypass leading to admin account takeover in all versions up to, and including, 28.1.5.Check if you run itEPSS 0.46%Mar 23, 2026
- Medium5.4The User Registration & Membership plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the Content Access Rules REST API enCheck if you run itEPSS 0.19%Mar 23, 2026
- High8.8The Jupiter X Core plugin for WordPress is vulnerable to limited file uploads due to missing authorization on import_popup_templates() function as well as insufficient file type vaCheck if you run itEPSS 0.70%Mar 23, 2026
- Critical9.8Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')Patch nowKEVEPSS 0.90%Mar 23, 2026
- Medium6.6Active Storage allows users to attach cloud and local files in Rails applications.Check if you run itEPSS 0.64%Mar 23, 2026
- Medium5.3Active Storage allows users to attach cloud and local files in Rails applications.Check if you run itEPSS 0.41%Mar 23, 2026
Sort