Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low3.5Knowage is an open source analytics and business intelligence suite.Check if you run itEPSS 0.19%Sep 1, 2025
- High8.6Cross-Site Request Forgery (CSRF) vulnerability in Akınsoft QR Menü allows Cross Site Request Forgery.Check if you run itEPSS 0.17%Sep 1, 2025
- UnknownFortinet FortiWeb Improper Handling of ParametersPatch nowKEVEPSS 10.08%Sep 1, 2025
- Medium5.3A vulnerability has been found in Koillection up to 1.6.18.Check if you run itEPSS 0.41%Aug 31, 2025
- High8.7A vulnerability in XAMPP, developed by Apache Friends, version 1.7.3's default WebDAV configuration allows remote authenticated attackers to upload and execute arbitrary PHP code.Check if you run itEPSS 1.88%Aug 30, 2025
- Critical9.3Dogfood CRM version 2.0.10 contains a remote command execution vulnerability in the spell.php script used by its mail subsystem.Check if you run itEPSS 1.91%Aug 30, 2025
- Critical9.3Belkin Bulldog Plus version 4.0.2 build 1219 contains a stack-based buffer overflow vulnerability in its web service authentication handler.Check if you run itEPSS 1.81%Aug 30, 2025
- Medium4.3The Related Posts Lite plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.12.Check if you run itEPSS 0.13%Aug 30, 2025
- Medium6.3Eventlet is a concurrent networking library for Python.Check if you run itEPSS 0.40%Aug 29, 2025
- Medium6.5Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 2.58%Aug 29, 2025
- Medium4.2Basecamp's Google Sign-In adds Google sign-in to Rails applications.Check if you run itEPSS 0.23%Aug 29, 2025
- High8.8Harness Open Source is an end-to-end developer platform with Source Control Management, CI/CD Pipelines, Hosted Developer Environments, and Artifact Registries.Check if you run itEPSS 0.50%Aug 29, 2025
- High7.3Hosts listed in TrustedOrigins implicitly allow requests from the corresponding HTTP origins, allowing network MitMs to perform CSRF attacks.Check if you run itEPSS 0.17%Aug 29, 2025
- Medium5.1Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities and Cultural Heritage (ACDH-CH), due to inadequate validat…Check if you run itEPSS 0.22%Aug 29, 2025
- Medium5.1Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities and Cultural Heritage (ACDH-CH), due to inadequate validation of user iCheck if you run itEPSS 0.22%Aug 29, 2025
- Medium5.1Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities and Cultural Heritage (ACDH-CH), due to inadequate validation of user iCheck if you run itEPSS 0.22%Aug 29, 2025
- Medium5.1Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities and Cultural Heritage (ACDH-CH), due to inadequate validation of user iCheck if you run itEPSS 0.22%Aug 29, 2025
- Medium5.1Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities and Cultural Heritage (ACDH-CH), due to inadequate validation of user iCheck if you run itEPSS 0.22%Aug 29, 2025
- Medium5.1Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities and Cultural Heritage (ACDH-CH), due to inadequate validation of user iCheck if you run itEPSS 0.22%Aug 29, 2025
- Medium5.1Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities and Cultural Heritage (ACDH-CH), due to inadequate validation of user iCheck if you run itEPSS 0.22%Aug 29, 2025
- Medium5.1Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities and Cultural Heritage (ACDH-CH), due to inadequate validation of user iCheck if you run itEPSS 0.22%Aug 29, 2025
- Medium4.3The Ultimate Tag Warrior Importer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.2.Check if you run itEPSS 0.13%Aug 29, 2025
- Medium4.0Akamai Ghost before 2025-07-21 allows HTTP Request Smuggling via an OPTIONS request that has an entity body, because there can be a subsequent request within the persi…Check if you run itEPSS 0.27%Aug 29, 2025
- Medium6.2Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 0.35%Aug 29, 2025
- High7.5Buffer Overflow in the URI parser of CivetWeb 1.14 through 1.16 (latest) allows a remote attacker to achieve remote code execution via a crafted HTTP request.Check if you run itEPSS 1.19%Aug 29, 2025
Sort