Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low1.3Action Pack is a Rubygem for building web applications on the Rails framework.Check if you run itEPSS 0.33%Mar 23, 2026
- Medium5.1MailEnable versions prior to 10.55 contain a reflected cross-site scripting vulnerability in the webmail interface that allows remote attackers to execute arbitrary Ja…Check if you run itEPSS 0.46%Mar 23, 2026
- Medium5.1MailEnable versions prior to 10.55 contain a reflected cross-site scripting vulnerability in the webmail interface that allows remote attackers to execute arbitrary Ja…Check if you run itEPSS 0.46%Mar 23, 2026
- Medium5.1MailEnable versions prior to 10.55 contain a reflected cross-site scripting vulnerability in the webmail interface that allows remote attackers to execute arbitrary Ja…Check if you run itEPSS 0.46%Mar 23, 2026
- Medium5.3WWBN AVideo is an open source video platform.Check if you run itEPSS 0.50%Mar 23, 2026
- Medium6.1A flaw was found in the GNU Binutils BFD library, a widely used component for handling binary files such as object files and executables.Check if you run itEPSS 0.17%Mar 23, 2026
- Critical10.0GV Edge Recording Manager (ERM) v2.3.1 improperly runs application components with SYSTEM-level privileges, allowing any local user to gain full control of the operating system.Check if you run itEPSS 0.41%Mar 23, 2026
- High8.1The Import and export users and customers plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.29.7.Patch nowKEVEPSS 0.54%Mar 21, 2026
- Medium4.3The Speedup Optimization plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 1.5.9.Check if you run itEPSS 0.34%Mar 21, 2026
- Medium6.4The Text Toggle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' shortcode attribute of the [tt_part] and [tt] shortcodes in all versi…Check if you run itEPSS 0.41%Mar 21, 2026
- Medium5.3The WP-Chatbot for Messenger plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.9.Check if you run itEPSS 0.47%Mar 21, 2026
- Medium5.6The The Contact Form, Survey, Quiz & Popup Form Builder – ARForms plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.7.2.Check if you run itEPSS 0.27%Mar 21, 2026
- High7.2OpenClaw versions prior to 2026.2.26 contain a path traversal vulnerability in workspace boundary validation that allows attackers to write files outside the workspace…Check if you run itEPSS 0.49%Mar 21, 2026
- High7.1The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line options for certain web browsers.Check if you run itEPSS 0.41%Mar 20, 2026
- Medium4.3Zimbra Collaboration (ZCS) 10.0 and 10.1 contains an LDAP injection vulnerability in the Mailbox SOAP service within a FolderAction operation.Check if you run itEPSS 0.40%Mar 20, 2026
- Medium6.1Zimbra Collaboration Suite (ZCS) 10.0 and 10.1 contains a reflected cross-site scripting (XSS) vulnerability in the Classic Webmail REST interface (/h/rest).Check if you run itEPSS 0.38%Mar 20, 2026
- Medium5.3ZITADEL is an open source identity management platform.Check if you run itEPSS 0.52%Mar 20, 2026
- High7.5Qwik is a performance-focused JavaScript framework.Check if you run itEPSS 0.59%Mar 20, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit teql_master_xmit(…Check if you run itEPSS 0.13%Mar 20, 2026
- High8.7Free5GC is an open-source Linux Foundation project for 5th generation (5G) mobile core networks.Check if you run itEPSS 0.60%Mar 20, 2026
- High8.2lz4_flex is a pure Rust implementation of LZ4 compression/decompression.Check if you run itEPSS 0.72%Mar 20, 2026
- Critical9.8SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.Check if you run itEPSS 0.88%Mar 20, 2026
- High8.8SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.Check if you run itEPSS 0.57%Mar 20, 2026
- High8.2Kysely is a type-safe TypeScript SQL query builder.Check if you run itEPSS 0.43%Mar 20, 2026
- Medium5.4Admidio is an open-source user management solution.Check if you run itEPSS 0.27%Mar 20, 2026