Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1The Gravity SMTP plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 2.1.4.Check if you run itEPSS 0.35%Apr 10, 2026
- Medium6.5The YITH WooCommerce Wishlist WordPress plugin before 4.13.0 does not properly validate wishlist ownership in the save_title() AJAX handler before allowing wishlist re…Check if you run itEPSS 0.27%Apr 10, 2026
- High8.7wolfSSL's wc_PKCS7_DecodeAuthEnvelopedData() does not properly sanitize the AES-GCM authentication tag length received and has no lower bounds check.Check if you run itEPSS 0.38%Apr 10, 2026
- Medium5.3OpenClaw before 2026.3.25 contains a server-side request forgery vulnerability in multiple channel extensions that fail to properly guard configured base URLs against SSRF attacks.Check if you run itEPSS 0.34%Apr 9, 2026
- High8.4An OS Command Injection vulnerability in the CLI processing of Juniper Networks Junos OS and Junos OS Evolved allows a local, high-privileged attacker executing specif…Check if you run itEPSS 0.67%Apr 9, 2026
- Critical9.0Wasmtime is a runtime for WebAssembly.Check if you run itEPSS 0.49%Apr 9, 2026
- Medium5.9Wasmtime is a runtime for WebAssembly.Check if you run itEPSS 0.42%Apr 9, 2026
- High7.2OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables.Check if you run itEPSS 1.31%Apr 9, 2026
- High7.5Integer Overflow or Wraparound vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ MQTT.Check if you run itEPSS 0.61%Apr 9, 2026
- Medium5.3fast-jwt provides fast JSON Web Token (JWT) implementation.Check if you run itEPSS 0.63%Apr 9, 2026
- High7.1An out-of-bounds read vulnerability exists in the function of .Check if you run itEPSS 0.19%Apr 9, 2026
- Medium4.3InvenTree is an Open Source Inventory Management System.Check if you run itEPSS 0.24%Apr 8, 2026
- Medium5.4LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provides data- and project-management for neuroimaging research.Check if you run itEPSS 0.22%Apr 8, 2026
- Medium5.4LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provides data- and project-management for neuroimaging research.Check if you run itEPSS 0.27%Apr 8, 2026
- Critical9.8Improper Limitation of a Pathname to a Restricted Directory (CWE-22) in Logstash can lead to arbitrary file write and potentially remote code execution via Relative Pa…Check if you run itEPSS 0.85%Apr 8, 2026
- High8.6XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it.Check if you run itEPSS 1.21%Apr 8, 2026
- Critical9.3Movable Type provided by Six Apart Ltd.Check if you run itEPSS 1.00%Apr 8, 2026
- High7.5The ActivityPub WordPress plugin before 8.0.2 does not properly filter posts to be displayed, allowed unauthenticated users to access drafts/scheduled/pending postsCheck if you run itEPSS 0.44%Apr 8, 2026
- Medium5.3Ado::Sessions versions through 0.935 for Perl generates insecure session ids.Check if you run itEPSS 0.52%Apr 8, 2026
- Medium5.3Amon2::Plugin::Web::CSRFDefender versions from 7.00 through 7.03 for Perl generate an insecure session id.Check if you run itEPSS 0.51%Apr 8, 2026
- Medium6.1Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used.Check if you run itEPSS 0.29%Apr 8, 2026
- Medium6.9An insufficient granularity of access control vulnerability exists in PingIDM (formerly ForgeRock Identity Management) where administrators cannot properly configure a…Check if you run itEPSS 0.24%Apr 7, 2026
- High8.7Flatpak is a Linux application sandboxing and distribution framework.Check if you run itEPSS 0.44%Apr 7, 2026
- Medium5.4Open Source Point of Sale is a web based point-of-sale application written in PHP using CodeIgniter framework.Check if you run itEPSS 0.24%Apr 7, 2026
- High7.5Drizzle is a modern TypeScript ORM.Check if you run itEPSS 0.42%Apr 7, 2026