Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9RansomLook is a tool to monitor Ransomware groups and markets and extract their victims.Check if you run itEPSS 0.44%Apr 21, 2026
- Critical10.0Net::Dropbear versions before 0.14 for Perl contains a vulnerable version of libtomcrypt.Check if you run itEPSS 0.57%Apr 21, 2026
- Critical10.0Storable versions before 3.05 for Perl has a stack overflow.Check if you run itEPSS 0.64%Apr 21, 2026
- Medium5.1Reflected Cross-Site Scripting (XSS) vulnerability in Navigate Content Management System.Check if you run itEPSS 0.53%Apr 21, 2026
- Medium4.3The Responsive Blocks – Page Builder for Blocks & Patterns plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 2.2.1.Check if you run itEPSS 0.37%Apr 21, 2026
- Low2.0OpenClaw before 2026.3.31 contains an environment variable override vulnerability in host exec policy that fails to properly enforce proxy, TLS, Docker, and Git TLS controls.Check if you run itEPSS 0.18%Apr 21, 2026
- Medium5.1Fudo Enterprise in versions from 5.5.0 through 5.6.2 allows low privileged users to access certain administrator-only resources via improperly protected API endpoints.Check if you run itEPSS 0.26%Apr 20, 2026
- Medium5.5A vulnerability was determined in 1024bit extend-deep up to 0.1.6.Check if you run itEPSS 0.56%Apr 20, 2026
- Medium6.9A vulnerability was determined in brikcss merge up to 1.3.0.Check if you run itEPSS 0.56%Apr 20, 2026
- Low3.7Secrets in Variables saved as JSON dictionaries were not properly redacted - in case thee variables were retrieved by the user the secrets stored as nested fields were not masked.Check if you run itEPSS 0.66%Apr 18, 2026
- Critical9.0Thymeleaf is a server-side Java template engine for web and standalone environments.Check if you run itEPSS 1.20%Apr 17, 2026
- Critical9.0Thymeleaf is a server-side Java template engine for web and standalone environments.Check if you run itEPSS 0.94%Apr 17, 2026
- High8.1HomeBox is a home inventory and organization system.Check if you run itEPSS 0.40%Apr 17, 2026
- High7.7xrdp is an open source RDP server.Check if you run itEPSS 0.78%Apr 17, 2026
- High8.8xrdp is an open source RDP server.Check if you run itEPSS 0.16%Apr 17, 2026
- High8.7OpenHarness before commit bd4df81 contains a permission bypass vulnerability that allows attackers to read sensitive files by exploiting incomplete path normalization…Check if you run itEPSS 0.36%Apr 17, 2026
- Medium5.3A flaw was found in the AAP MCP server.Check if you run itEPSS 0.41%Apr 17, 2026
- Medium5.3The LatePoint plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.3.2.Check if you run itEPSS 0.64%Apr 17, 2026
- Low3.1The OneSignal – Web Push Notifications plugin for WordPress is vulnerable to authorization bypass in versions up to, and including, 3.8.0.Check if you run itEPSS 0.28%Apr 16, 2026
- Critical9.1The XML parsers within multiple WSO2 products accept user-supplied XML data without properly configuring to prevent the resolution of external entities.Check if you run itEPSS 0.38%Apr 16, 2026
- Medium5.3The Basic Google Maps Placemarks plugin for WordPress is vulnerable to authorization bypass in versions up to, and including, 1.10.7.Check if you run itEPSS 0.35%Apr 16, 2026
- Medium4.3The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to Missing…Check if you run itEPSS 0.36%Apr 15, 2026
- Medium6.6Drupal core - Moderately critical - Gadget Chain - SA-CORE-2026-002Check if you run itEPSS 0.42%Apr 15, 2026
- Medium5.4A flaw was found in KubeVirt's Role-Based Access Control (RBAC) evaluation logic.Check if you run itEPSS 0.25%Apr 15, 2026
- Medium5.5A flaw was found in the System Security Services Daemon (SSSD).Check if you run itEPSS 0.15%Apr 15, 2026