Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low3.1The OneSignal – Web Push Notifications plugin for WordPress is vulnerable to authorization bypass in versions up to, and including, 3.8.0.Check if you run itEPSS 0.28%Apr 16, 2026
- Medium5.3The Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capa…Check if you run itEPSS 0.28%Apr 16, 2026
- Medium4.8MuPDF before 1.27 contains an ANSI injection vulnerability in mutool that allows attackers to inject arbitrary ANSI escape sequences through crafted PDF metadata fields.Check if you run itEPSS 0.19%Apr 16, 2026
- Critical9.3Creolabs Gravity before 0.9.6 contains a heap buffer overflow vulnerability in the gravity_vm_exec function that allows attackers to write out-of-bounds memory by craf…Check if you run itEPSS 0.88%Apr 16, 2026
- Critical9.8The Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale) plugin for WordPress is vulnerable to privilege escalation via ins…Check if you run itEPSS 0.78%Apr 16, 2026
- High8.8Composer is a dependency manager for PHP.Check if you run itEPSS 1.91%Apr 15, 2026
- High8.7ApostropheCMS is an open-source Node.js content management system.Check if you run itEPSS 0.44%Apr 15, 2026
- Medium5.4ApostropheCMS is an open-source Node.js content management system.Check if you run itEPSS 0.26%Apr 15, 2026
- Medium5.3ApostropheCMS is an open-source Node.js content management system.Check if you run itEPSS 0.52%Apr 15, 2026
- Medium4.3The Petje.af plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 2.1.8.Check if you run itEPSS 0.20%Apr 15, 2026
- Medium6.9XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it.Check if you run itEPSS 0.70%Apr 15, 2026
- High7.1Zarf is an Airgap Native Packager Manager for Kubernetes.Check if you run itEPSS 0.39%Apr 15, 2026
- Medium4.3The Avada (Fusion) Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.15.1.Check if you run itEPSS 0.28%Apr 15, 2026
- Medium5.3The 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery plugin for WordPress is vulnerable to unauthorized access of data due to a missing capabili…Check if you run itEPSS 0.89%Apr 15, 2026
- Critical9.6NuGet Gallery is a package repository that powers nuget.org.Check if you run itEPSS 0.82%Apr 14, 2026
- High8.8Chamilo LMS is an open-source learning management system.Check if you run itEPSS 2.63%Apr 14, 2026
- High8.6Chamilo LMS is an open-source learning management system.Check if you run itEPSS 0.57%Apr 14, 2026
- High7.7Kyverno APICall SSRF Vulnerability Leading to Multi-Tenant Isolation Breach in github.com/kyverno/kyvernoCheck if you run itEPSS 0.36%Apr 14, 2026
- Critical9.0Improper neutralization of escape, meta, or control sequences in Microsoft Power Apps allows an authorized attacker to perform spoofing over a network.Check if you run itEPSS 0.77%Apr 14, 2026
- Medium5.4Stored Cross-Site Scripting (XSS) via Unsanitized Topology Metadata in Apache Storm UI Versions Affected: before 2.8.6 Description: The Storm UI visualization componen…Check if you run itEPSS 0.59%Apr 13, 2026
- Critical9.8An attacker can control a server-side HTTP request by supplying a crafted URL, causing the server to initiate requests to arbitrary destinations.Check if you run itEPSS 0.34%Apr 13, 2026
- Low2.1A security flaw has been discovered in FoundationAgents MetaGPT up to 0.8.1.Check if you run itEPSS 0.37%Apr 12, 2026
- Medium5.5A vulnerability was identified in FoundationAgents MetaGPT up to 0.8.1.Check if you run itEPSS 0.71%Apr 12, 2026
- Low2.1A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.1.Check if you run itEPSS 0.29%Apr 12, 2026
- High7.1The wpForo Forum plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to and including 3.0.2.Check if you run itEPSS 0.63%Apr 11, 2026