Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2web3.py allows you to interact with the Ethereum blockchain using Python.Check if you run itEPSS 0.31%Apr 9, 2026
- High8.5n8n-MCP is a Model Context Protocol (MCP) server that provides AI assistants with comprehensive access to n8n node documentation, properties, and operations.Check if you run itEPSS 0.43%Apr 9, 2026
- Medium5.2oma is a package manager for AOSC OS.Check if you run itEPSS 0.64%Apr 9, 2026
- High8.8Directus is a real-time API and App dashboard for managing SQL database content.Check if you run itEPSS 0.36%Apr 9, 2026
- Medium4.3Improper Handling of Insufficient Privileges vulnerability in Apache OpenMeetings.Check if you run itEPSS 0.65%Apr 9, 2026
- High7.5A memory exhaustion vulnerability exists in ZIP archive processing.Check if you run itEPSS 0.76%Apr 9, 2026
- High7.5A gzip decompression bomb vulnerability exists when Orthanc processes HTTP request with .Check if you run itEPSS 0.76%Apr 9, 2026
- High7.5An out-of-bounds read vulnerability exists in during DICOM meta-header parsing.Check if you run itEPSS 0.76%Apr 9, 2026
- Medium4.4LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files.Check if you run itEPSS 0.16%Apr 9, 2026
- High8.2OPNsense is a FreeBSD based firewall and routing platform.Check if you run itEPSS 0.48%Apr 9, 2026
- Medium6.4The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sid' parameter of the 'wpdm_members' shortcode in versions up to and in…Check if you run itEPSS 0.35%Apr 9, 2026
- Medium4.3The MStore API plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.18.3.Check if you run itEPSS 0.36%Apr 9, 2026
- Critical9.8Race in Media in Google Chrome on Android prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to corrupt media stream metadata vi…Check if you run itEPSS 0.33%Apr 8, 2026
- High8.5UAC (Unix-like Artifacts Collector) before 3.3.0-rc1 contains a command injection vulnerability in the placeholder substitution and command execution pipeline where th…Check if you run itEPSS 1.18%Apr 8, 2026
- High8.4parseusbs before 1.9 contains an OS command injection vulnerability where the volume listing path argument (-v flag) is passed unsanitized into an os.popen() shell com…Check if you run itEPSS 1.19%Apr 8, 2026
- High8.5parseusbs before 1.9 contains an OS command injection vulnerability in parseUSBs.py where LNK file paths are passed unsanitized into an os.popen() shell command, allow…Check if you run itEPSS 1.33%Apr 8, 2026
- High7.5FrontMCP is a TypeScript-first framework for the Model Context Protocol (MCP).Check if you run itEPSS 0.42%Apr 8, 2026
- High8.3Zammad is a web based open source helpdesk/customer support system.Check if you run itEPSS 0.30%Apr 8, 2026
- Critical9.1A Server-Side Request Forgery (SSRF) vulnerability exists in the Print Format functionality of ERPNext v16.0.1 and Frappe Framework v16.1.1, where user-supplied HTML i…Check if you run itEPSS 0.42%Apr 8, 2026
- Medium6.4The Robo Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Loading Label' setting in all versions up to, and including, 5.1.3.Check if you run itEPSS 0.51%Apr 8, 2026
- Medium5.3Missing Authorization vulnerability in nfusionsolutions Precious Metals Automated Product Pricing – Pro precious-metals-automated-product-pricing-pro allows Exploiting…Check if you run itEPSS 0.26%Apr 8, 2026
- Medium5.3The Masteriyo LMS – Online Course Builder for eLearning, LMS & Education plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key in vers…Check if you run itEPSS 0.49%Apr 8, 2026
- Medium6.4The Pinterest Site Verification plugin using Meta Tag plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_var' parameter in versions up to,…Check if you run itEPSS 0.36%Apr 8, 2026
- Medium6.4The Prime Slider – Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'follow_us_text' setting of the Mount widget in all v…Check if you run itEPSS 0.35%Apr 8, 2026
- Critical9.8The Users manager – PN plugin for WordPress is vulnerable to Privilege Escalation via Arbitrary User Meta Update in all versions up to and including 1.1.15.Patch nowKEVEPSS 1.31%Apr 8, 2026