Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3HomeBox is a home inventory and organization system.Check if you run itEPSS 0.29%Mar 3, 2026
- Critical9.8An issue in the reset_pj.cgi endpoint of Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 allows unauthorized attackers to execute arbitrary commands via supplying a…Check if you run itEPSS 0.36%Mar 3, 2026
- High7.2Multiple authenticated OS command injection vulnerabilities exist in the Cohesity (formerly Stone Ram) TranZman 4.0 Build 14614 through TZM_1757588060_SEP2025_FULL.dep…Check if you run itEPSS 3.83%Mar 3, 2026
- High8.1A Cross-Site Request Forgery (CSRF) vulnerability in Nokia IMPACT through 19.11.2.10-20210118042150283 allows a remote attacker to import and overwrite the entire appl…Check if you run itEPSS 0.19%Mar 3, 2026
- High7.1An issue in the WiseDelfile64.sys component of WiseCleaner Wise Force Deleter 7.3.2 and earlier allows attackers to delete arbitrary files via a crafted request.Check if you run itEPSS 0.22%Mar 3, 2026
- Low3.7An issue was discovered in 6.0 before 6.0.3, 5.2 before 5.2.12, and 4.2 before 4.2.29.Check if you run itEPSS 0.35%Mar 3, 2026
- Critical9.8An issue in Step-Video-T2V allows a remote attacker to execute arbitrary code via the /vae-api , /caption-api , feature = pickle.loads(request.get_data()) componentCheck if you run itEPSS 0.52%Mar 3, 2026
- Low1.9Versions of the package @tootallnate/once before 3.0.1 are vulnerable to Incorrect Control Flow Scoping in promise resolving when AbortSignal option is used.Check if you run itEPSS 0.17%Mar 3, 2026
- High7.2The Uncanny Automator – Easy Automation, Integration, Webhooks & Workflow Builder Plugin plugin for WordPress is vulnerable to Server-Side Request Forgery in all versi…Check if you run itEPSS 0.68%Mar 3, 2026
- High8.4In createRequest of MediaProvider.java, there is a possible way for an app to gain read/write access to non-existing files due to a logic error in the code.Check if you run itEPSS 0.10%Mar 2, 2026
- High7.8In executeRequest of ActivityStarter.java, there is a possible launch anywhere due to a confused deputy.Check if you run itEPSS 0.10%Mar 2, 2026
- Critical9.9ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI.Check if you run itEPSS 0.62%Mar 2, 2026
- Medium6.5ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI.Check if you run itEPSS 0.25%Mar 2, 2026
- High7.1Chamilo is a learning management system.Check if you run itEPSS 0.30%Mar 2, 2026
- Critical9.8Chamilo is a learning management system.Check if you run itEPSS 0.91%Mar 2, 2026
- Medium5.3Chamilo is a learning management system.Check if you run itEPSS 0.34%Mar 2, 2026
- High7.1The CGM CLININET application uses direct, sequential object identifiers "MessageID" without proper authorization checks.Check if you run itEPSS 0.22%Mar 2, 2026
- Medium6.9wpForo Forum 2.4.14 contains an information disclosure vulnerability that allows unauthenticated users to retrieve private and unapproved forum topics via the global R…Check if you run itEPSS 0.49%Feb 28, 2026
- Medium6.5The Super Stage WP WordPress plugin through 1.0.1 unserializes user input via REQUEST, which could allow unauthenticated users to perform PHP Object Injection when a s…Check if you run itEPSS 0.20%Feb 28, 2026
- High8.6Statmatic is a Laravel and Git powered content management system (CMS).Check if you run itEPSS 0.48%Feb 27, 2026
- Medium5.3Featured Image from Content (featured-image-from-content) WordPress plugin versions prior to 1.7 contain an authenticated server-side request forgery vulnerability tha…Check if you run itEPSS 0.42%Feb 27, 2026
- High8.6Gradio is an open-source Python package designed for quick prototyping.Check if you run itEPSS 0.36%Feb 27, 2026
- Critical9.8WeGIA is a web manager for charitable institutions.Check if you run itEPSS 0.68%Feb 27, 2026
- Medium5.3calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books.Check if you run itEPSS 0.19%Feb 27, 2026
- Medium6.5Seerr is an open-source media request and discovery manager for Jellyfin, Plex, and Emby.Check if you run itEPSS 0.43%Feb 27, 2026