Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1Kargo manages and automates the promotion of software artifacts.Check if you run itEPSS 0.36%Mar 20, 2026
- High8.8The CTFer.io Monitoring component is in charge of the collection, process and storage of various signals (i.e.Check if you run itEPSS 0.72%Mar 20, 2026
- High7.1Fullchain is an umbrella project for deploying a ready-to-use CTF platform.Check if you run itEPSS 0.55%Mar 20, 2026
- Critical9.8SiYuan is a personal knowledge management system.Check if you run itEPSS 0.60%Mar 20, 2026
- Low1.7astral-tokio-tar is a tar archive reading/writing library for async Rust.Check if you run itEPSS 0.27%Mar 20, 2026
- Critical9.3Xerte Online Toolkits versions 3.14 and earlier contain an unauthenticated arbitrary file upload vulnerability in the template import functionality that allows remote attackers toCheck if you run itEPSS 1.68%Mar 20, 2026
- Critical9.8The Kali Forms plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.4.9 via the 'form_process' function.Patch nowKEVEPSS 7.09%Mar 20, 2026
- Medium5.4An issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1.Check if you run itEPSS 0.17%Mar 20, 2026
- Medium4.3An issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1.Check if you run itEPSS 0.27%Mar 20, 2026
- Medium6.1An issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1.Check if you run itEPSS 0.24%Mar 20, 2026
- Medium4.3Zimbra Collaboration (ZCS) 10.0 and 10.1 contains an LDAP injection vulnerability in the Mailbox SOAP service within a FolderAction operation.Check if you run itEPSS 0.26%Mar 20, 2026
- Medium6.1Zimbra Collaboration Suite (ZCS) 10.0 and 10.1 contains a reflected cross-site scripting (XSS) vulnerability in the Classic Webmail REST interface (/h/rest).Check if you run itEPSS 0.26%Mar 20, 2026
- Critical9.3Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.30%Mar 20, 2026
- Medium4.3File Thingie 2.5.7 is vulnerable to Directory Traversal.Check if you run itEPSS 0.70%Mar 20, 2026
- Medium6.5File Thingie 2.5.7 is vulnerable to Cross Site Scripting (XSS).Check if you run itEPSS 0.21%Mar 20, 2026
- Medium6.5File Thinghie 2.5.7 is vulnerable to Cross Site Scripting (XSS).Check if you run itEPSS 0.21%Mar 20, 2026
- Medium6.1DooTask v1.6.27 has a Cross-Site Scripting (XSS) vulnerability in the /manage/project/ page via the input field projectDesc.Check if you run itEPSS 0.18%Mar 20, 2026
- Critical9.8Oracle identity_manager Missing Authentication for Critical FunctionPatch nowKEVEPSS 1.06%Mar 20, 2026
- High8.8The Terrapack software, from ASTER TEC / ASTER S.p.A., with the indicated components and versions has a file upload vulnerability that may allow attackers to execute arbitrary codeCheck if you run itEPSS 0.44%Mar 20, 2026
- High7.8AWStats 8.0 is vulnerable to Command Injection via the open functionCheck if you run itEPSS 1.21%Mar 20, 2026
- Medium5.4SyncFusion 30.1.37 is vulnerable to Cross Site Scripting (XSS) via the Document-Editor reply to comment field and Chat-UI Chat message.Check if you run itEPSS 0.19%Mar 20, 2026
- High7.2An issue in the component /Controllers/RestController.php of DreamFactory Core v1.0.3 allows attackers to execute a directory traversal via an unsanitized URI path.Check if you run itEPSS 0.97%Mar 20, 2026
- Medium5.3Bitcoin Core through 29.0 allows a denial of service via a crafted transaction.Check if you run itEPSS 0.37%Mar 20, 2026
- High7.5Bitcoin Core 0.13.0 through 29.x has an integer overflow.Check if you run itEPSS 0.32%Mar 20, 2026
- Critical9.8SysAK v2.0 and before is vulnerable to command execution via aaa;cat /etc/passwd.Check if you run itEPSS 0.57%Mar 20, 2026
Sort