Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8Glances is an open-source system cross-platform monitoring tool.Check if you run itEPSS 0.78%Apr 2, 2026
- High8.7SzafirHost downloads necessary files in the context of the initiating web page.Check if you run itEPSS 0.22%Apr 2, 2026
- High7.5The W3 Total Cache plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 2.9.3.Check if you run itEPSS 2.66%Apr 2, 2026
- Medium6.9File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory.Check if you run itEPSS 0.36%Apr 1, 2026
- Critical9.0File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory.Check if you run itEPSS 0.39%Apr 1, 2026
- Critical9.8File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory.Check if you run itEPSS 0.66%Apr 1, 2026
- High7.0Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune.Check if you run itEPSS 0.15%Apr 1, 2026
- High8.4An arbitrary file overwrite vulnerability in Tinybeans Private Family Album App v5.9.5-prod allows attackers to overwrite critical internal files via the file import p…Check if you run itEPSS 0.22%Apr 1, 2026
- Low2.1A vulnerability was identified in z-9527 admin 1.0/2.0.Check if you run itEPSS 0.41%Apr 1, 2026
- Low2.1A vulnerability has been found in gougucms 4.08.18.Check if you run itEPSS 0.41%Apr 1, 2026
- Medium5.3XenForo before 2.2.17 and 2.3.1 allows open redirect via a specially crafted URL.Check if you run itEPSS 0.15%Apr 1, 2026
- Unknowngamipress gamipress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 2.55%Apr 1, 2026
- High8.6SiYuan is a personal knowledge management system.Check if you run itEPSS 0.60%Mar 31, 2026
- High7.5WWBN AVideo is an open source video platform.Check if you run itEPSS 0.58%Mar 31, 2026
- High8.2Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.47%Mar 31, 2026
- High7.7Out-of-bounds write in the streaming decoder component in aws-c-event-stream before 0.6.0 might allow a third party operating a server to cause memory corruption leadi…Check if you run itEPSS 0.53%Mar 31, 2026
- High7.8InfCode's terminal auto-execution module contains a critical command filtering vulnerability that renders its blacklist security mechanism completely ineffective.Check if you run itEPSS 0.38%Mar 31, 2026
- Medium4.3An attacker might be able to inject HTML content into the internal web dashboard by sending crafted DNS queries to a DNSdist instance where domain-based dynamic rules…Check if you run itEPSS 0.14%Mar 31, 2026
- Critical9.3SQL inyection (SQLi) vulnerability in Umami Software web application through an improperly sanitized parameter, which could allow an authenticated attacker to execute…Check if you run itEPSS 0.40%Mar 31, 2026
- High7.1Nginx UI is a web user interface for the Nginx web server.Check if you run itEPSS 0.59%Mar 30, 2026
- High8.1Handlebars provides the power necessary to let users build semantic templates.Check if you run itEPSS 0.79%Mar 27, 2026
- Medium5.4Statamic is a Laravel and Git powered content management system (CMS).Check if you run itEPSS 0.24%Mar 27, 2026
- Medium6.5Statamic is a Laravel and Git powered content management system (CMS).Check if you run itEPSS 0.38%Mar 27, 2026
- Medium6.1Statamic is a Laravel and Git powered content management system (CMS).Check if you run itEPSS 0.30%Mar 27, 2026
- Medium4.3Statamic is a Laravel and Git powered content management system (CMS).Check if you run itEPSS 0.27%Mar 27, 2026