Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3The Page Blocks plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.0.Check if you run itEPSS 0.17%Oct 11, 2025
- Medium6.8The WP Scraper plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.8.1 via the wp_scraper_extract_content function.Check if you run itEPSS 0.34%Oct 11, 2025
- Medium4.3The WidgetPack Comment System plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.6.1.Check if you run itEPSS 0.16%Oct 11, 2025
- Medium5.5python-ldap is a lightweight directory access protocol (LDAP) client API for Python.Check if you run itEPSS 0.46%Oct 10, 2025
- High8.1Emlog is an open source website building system.Check if you run itEPSS 0.22%Oct 10, 2025
- Medium6.5Astro is a web framework.Check if you run itEPSS 0.41%Oct 10, 2025
- High7.5Rack is a modular Ruby web server interface.Check if you run itEPSS 0.65%Oct 10, 2025
- Medium5.1Cross-site request forgery (CSRF) vulnerability in Liferay Portal 7.4.1 through 7.4.3.112, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.10, and 7.4 GA thrCheck if you run itEPSS 0.19%Oct 10, 2025
- Medium5.8Rack is a modular Ruby web server interface.Check if you run itEPSS 0.55%Oct 10, 2025
- Medium5.7Insertion of sensitive information in log file in Elasticsearch can lead to loss of confidentiality under specific preconditions when auditing requests to the reindex API https://wCheck if you run itEPSS 0.25%Oct 10, 2025
- Medium5.1Stored Cross-Site Scripting (XSS) vulnerability in Energy CRM v2025 by Status Tracker Ltd, consisting of a stored XSS due to lack of proper validation of user input by sending a POCheck if you run itEPSS 0.21%Oct 10, 2025
- Critical9.3Better Auth is an authentication and authorization library for TypeScript.Check this weekEPSS 18.84%Oct 9, 2025
- Medium4.6Allstar is a GitHub App to set and enforce security policies.Check if you run itEPSS 0.50%Oct 9, 2025
- High8.7Confidential Containers's Trustee project contains tools and components for attesting confidential guests and providing secrets to them.Check if you run itEPSS 0.45%Oct 9, 2025
- High8.1pyLoad is a free and open-source download manager written in Python.Check if you run itEPSS 0.52%Oct 9, 2025
- Medium6.1Newforma Info Exchange (NIX) accepts requests to '/UserWeb/Common/MarkupServices.ashx' specifying the 'DownloadExportedPDF' command that allow an authenticated user to read and delCheck if you run itEPSS 0.41%Oct 9, 2025
- High8.5New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system.Check if you run itEPSS 0.24%Oct 9, 2025
- High7.1A vulnerability was found in Tenda W12 3.0.0.6(3948).Check if you run itEPSS 0.96%Oct 9, 2025
- High8.7A vulnerability has been found in Tenda W12 3.0.0.6(3948).Check if you run itEPSS 8.48%Oct 9, 2025
- High8.7An Uncontrolled Resource Consumption vulnerability in the HTTP daemon (httpd) of Juniper Networks Junos Space allows an unauthenticated network-based attacker flooding the device wCheck if you run itEPSS 0.41%Oct 9, 2025
- Low1.0Potential use of sensitive information in GET requests in Checkmk GmbH's Checkmk versions <2.4.0p13, <2.3.0p38, <2.2.0p46, and 2.1.0 (EOL) may cause sensitive form data to be incluCheck if you run itEPSS 0.19%Oct 9, 2025
- High7.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.12 to 18.2.8, 18.3 to 18.3.4, and 18.4 to 18.4.2 that could make the GitLab instance unresponsive or sCheck if you run itEPSS 0.53%Oct 9, 2025
- Medium5.4The WP Go Maps (formerly WP Google Maps) plugin for WordPress is vulnerable to Cross-Site Request Forgery (CSRF) in all versions up to, and including, 9.0.46.Check if you run itEPSS 0.19%Oct 9, 2025
- High7.3The authentication mechanism in Perfex CRM before 3.3.1 allows attackers to bypass login credentials due to insufficient server-side validation.Check if you run itEPSS 0.28%Oct 9, 2025
- UnknownD-Link dir-868l_firmware Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 0.82%Oct 9, 2025
Sort