Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.0The Responsive Lightbox & Gallery plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.7.1.Check if you run itEPSS 0.27%Feb 25, 2026
- Low2.1A vulnerability has been found in SourceCodester Website Link Extractor 1.0.Check if you run itEPSS 0.48%Feb 25, 2026
- High8.6changedetection.io is a free open source web page change detection tool.Check if you run itEPSS 0.53%Feb 25, 2026
- Medium6.5Coturn is a free open source implementation of TURN and STUN Server.Check if you run itEPSS 0.51%Feb 25, 2026
- High7.1The SPIP interface_traduction_objets plugin versions prior to 2.2.2 contain an authenticated SQL injection vulnerability in interface_traduction_objets_pipelines.php.Check if you run itEPSS 0.62%Feb 25, 2026
- Medium5.1The SPIP jeux plugin versions prior to 4.1.1 contain a reflected cross-site scripting (XSS) vulnerability in the pre_propre pipeline.Check if you run itEPSS 0.42%Feb 25, 2026
- High8.7The SPIP interface_traduction_objets plugin versions prior to 2.2.2 contain an authenticated remote code execution vulnerability in the translation interface workflow.Check if you run itEPSS 1.27%Feb 25, 2026
- Critical9.3The SPIP tickets plugin versions prior to 4.3.3 contain an unauthenticated remote code execution vulnerability in the forum preview handling for public ticket pages.Check if you run itEPSS 1.51%Feb 25, 2026
- Critical9.3The SPIP referer_spam plugin versions prior to 1.3.0 contain an unauthenticated SQL injection vulnerability in the referer_spam_ajouter and referer_spam_supprimer action handlers.Check if you run itEPSS 0.82%Feb 25, 2026
- Low3.1Talishar is a fan-made Flesh and Blood project.Check if you run itEPSS 0.14%Feb 25, 2026
- High8.8InvenTree is an Open Source Inventory Management System.Check if you run itEPSS 0.58%Feb 25, 2026
- High8.3Parse Dashboard is a standalone dashboard for managing Parse Server apps.Check if you run itEPSS 0.21%Feb 25, 2026
- Critical9.3Parse Dashboard is a standalone dashboard for managing Parse Server apps.Check if you run itEPSS 0.42%Feb 25, 2026
- Medium6.5OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.30%Feb 25, 2026
- Critical10.0Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass VulnerabilityPatch nowKEVEPSS 89.29%Feb 25, 2026
- High7.5GitLab has remediated an issue in GitLab CE/EE affecting versions from 18.9 before 18.9.1 that could have under certain conditions, allowed an unauthenticated user to cause denialCheck if you run itEPSS 0.41%Feb 25, 2026
- High7.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.4 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that could have allowed an unauthenticatedCheck if you run itEPSS 0.41%Feb 25, 2026
- High8.8Statmatic is a Laravel and Git powered content management system (CMS).Check if you run itEPSS 0.63%Feb 24, 2026
- Medium6.9Wasmtime is a runtime for WebAssembly.Check if you run itEPSS 0.74%Feb 24, 2026
- Medium5.5Fiber is an Express inspired web framework written in Go.Check if you run itEPSS 0.90%Feb 24, 2026
- High8.8SummaryThis advisory addresses a SQL injection vulnerability in the API endpoint used for retrieving contact activities.Check if you run itEPSS 0.43%Feb 24, 2026
- Medium4.6Mastodon is a free, open-source social network server based on ActivityPub.Check if you run itEPSS 0.40%Feb 24, 2026
- Medium4.8Mastodon is a free, open-source social network server based on ActivityPub.Check if you run itEPSS 0.49%Feb 24, 2026
- High8.9Caddy is an extensible server platform that uses TLS by default.Check if you run itEPSS 0.96%Feb 24, 2026
- Medium6.9Caddy is an extensible server platform that uses TLS by default.Check if you run itEPSS 0.27%Feb 24, 2026