Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.3Pterodactyl is a free, open-source game server management panel.Check if you run itEPSS 0.35%Jun 2, 2026
- Medium6.5wire-ios is an iOS client for the Wire secure messaging application.Check if you run itEPSS 0.41%Jun 2, 2026
- High7.3AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.Check if you run itEPSS 0.50%Jun 2, 2026
- High7.5React Router is a router for React.Check if you run itEPSS 0.45%Jun 2, 2026
- Medium4.7React Router is a router for React.Check if you run itEPSS 0.23%Jun 2, 2026
- High7.2Dräger SC Monitoring devices (SC 6002XL, SC 6802XL, SC 7000, SC 8000, SC 9000 XL) contain hard-coded plaintext credentials in source code and a denial-of-service vulne…Check if you run itEPSS 0.19%Jun 2, 2026
- High8.2Allocation of Resources Without Limits or Throttling vulnerability in elixir-mint Mint allows attacker-controlled HTTP/2 servers to exhaust memory in a Mint client (HT…Check if you run itEPSS 0.52%Jun 2, 2026
- High8.2Allocation of Resources Without Limits or Throttling vulnerability in elixir-mint Mint allows attacker-controlled HTTP/2 servers to exhaust memory in a Mint client via…Check if you run itEPSS 0.52%Jun 2, 2026
- Medium5.3transmission through 4.1.1 was found to have a clickjacking weakness in the browser-facing WebUI and RPC response paths.Check if you run itEPSS 0.40%Jun 2, 2026
- High7.4SIP signaling stack in Verizon IMS (unspecified version) implements SIP signaling without IPsec integrity protection (missing Security-Client/Security-Server headers a…Check if you run itEPSS 0.24%Jun 2, 2026
- Medium5.1Symlink following vulnerability in Gleam's Hex package export allows files outside the project root to be embedded in the generated package tarball.Check if you run itEPSS 0.17%Jun 2, 2026
- Medium6.5D.Launcher 2 component of Slovak eID client ecosystem contains Improper URL Handler Processing vulnerability.Check if you run itEPSS 0.39%Jun 2, 2026
- Medium4.3The Remove NoFollow Commenter URL plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.Check if you run itEPSS 0.19%Jun 2, 2026
- Medium4.3The Google Plus One Bottom plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.0.2.Check if you run itEPSS 0.19%Jun 2, 2026
- Medium4.3The Laiser Tag plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.5.Check if you run itEPSS 0.19%Jun 2, 2026
- Medium4.3The Tectite Forms plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.Check if you run itEPSS 0.19%Jun 2, 2026
- Medium4.3The Remove meta boxes per user role plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.01.Check if you run itEPSS 0.20%Jun 2, 2026
- Medium4.3The BirdSeed plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.0.Check if you run itEPSS 0.19%Jun 2, 2026
- Medium6.1The hiWeb Migration Simple plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'new_domain' parameter in all versions up to, and including, 2.…Check if you run itEPSS 0.21%Jun 2, 2026
- Medium6.1The rognone plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'a' parameter in versions up to, and including, 0.6.2 due to insufficient inpu…Check if you run itEPSS 0.21%Jun 2, 2026
- Medium6.1The rognone plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'mode' parameter in versions up to, and including, 0.6.2 due to insufficient i…Check if you run itEPSS 0.20%Jun 2, 2026
- Low2.3The DeepAI endpoint 'https://api.deepai.org/change_user_email' accepts POST requests without any CSRF protection.Check if you run itEPSS 0.16%Jun 1, 2026
- High7.5CodexBar prior to 0.32.0 contains a privilege escalation vulnerability in the CLI installer that allows local attackers to execute arbitrary commands as root by exploi…Check if you run itEPSS 0.48%Jun 1, 2026
- High8.8IBM i Access Family 1.1.5.0 through 1.1.9.12 IBM i Access Client Solutions (ACS) is vulnerable to remote code execution when configured to listen for requests from IBM i Navigator.Check if you run itEPSS 0.81%Jun 1, 2026
- Medium4.3Nextcloud is an open source content collaboration platform.Check if you run itEPSS 0.36%Jun 1, 2026