Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1Incorrect Privilege Assignment vulnerability in Metagauss RegistrationMagic custom-registration-form-builder-with-submission-manager allows Privilege Escalation.This i…Check if you run itEPSS 0.38%Mar 25, 2026
- High7.5Missing Authorization vulnerability in Metagauss EventPrime eventprime-event-calendar-management allows Exploiting Incorrectly Configured Access Control Security Level…Check if you run itEPSS 0.31%Mar 25, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: Squashfs: check metadata block offset is within range Syzkaller reports a "general protection fault…Check if you run itEPSS 0.12%Mar 25, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ife: Fix metalist update behavior Whenever an ife action replace changes the metalis…Check if you run itEPSS 0.14%Mar 25, 2026
- Medium6.4The Easy Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Gallery shortcode post meta field in all versions up to, and including, 1.5.3.Check if you run itEPSS 0.32%Mar 25, 2026
- Medium4.3GitLab has remediated an issue in GitLab EE affecting all versions from 18.6 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that under certain conditions…Check if you run itEPSS 0.26%Mar 25, 2026
- High8.6Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.67%Mar 24, 2026
- High7.1Wallos is an open-source, self-hostable personal subscription tracker.Check if you run itEPSS 0.41%Mar 24, 2026
- Low1.3Craft CMS is a content management system (CMS).Check if you run itEPSS 0.34%Mar 24, 2026
- Critical9.1LoLLMs WEBUI provides the Web user interface for Lord of Large Language and Multi modal Systems.Check if you run itEPSS 1.66%Mar 24, 2026
- High7.4Vikunja is an open-source self-hosted task management platform.Check if you run itEPSS 0.45%Mar 24, 2026
- Critical9.1The WP DSGVO Tools (GDPR) plugin for WordPress is vulnerable to unauthorized account destruction in all versions up to, and including, 3.1.38.Check if you run itEPSS 0.72%Mar 24, 2026
- High7.3Improper Handling of Values vulnerability in No-Chicken Echo-Mate (SDK/rv1106-sdk/sysdrv/source/kernel/include/net/netfilter modules).Check if you run itEPSS 0.12%Mar 24, 2026
- Medium6.6Active Storage allows users to attach cloud and local files in Rails applications.Check if you run itEPSS 0.65%Mar 24, 2026
- Medium5.3Active Storage allows users to attach cloud and local files in Rails applications.Check if you run itEPSS 0.39%Mar 24, 2026
- Medium6.5The Quiz and Survey Master (QSM) plugin for WordPress is vulnerable to SQL Injection via the 'merged_question' parameter in all versions up to, and including, 10.3.5.Check if you run itEPSS 0.32%Mar 23, 2026
- High8.8WWBN AVideo is an open source video platform.Check if you run itEPSS 0.92%Mar 23, 2026
- High7.5WWBN AVideo is an open source video platform.Check if you run itEPSS 0.32%Mar 23, 2026
- High8.2WWBN AVideo is an open source video platform.Check if you run itEPSS 0.43%Mar 23, 2026
- High8.8A command injection vulnerability exists in DigitalOcean Droplet Agent through 1.3.2.Check if you run itEPSS 2.50%Mar 23, 2026
- High8.1WWBN AVideo is an open source video platform.Check if you run itEPSS 4.65%Mar 23, 2026
- High8.6WWBN AVideo is an open source video platform.Check if you run itEPSS 0.43%Mar 23, 2026
- UnknownTP-Link tl-wr849n_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 42.67%Mar 23, 2026
- High8.1The Import and export users and customers plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.29.7.Patch nowKEVEPSS 0.54%Mar 21, 2026
- Low2.1A vulnerability was found in Foundation Agents MetaGPT up to 0.8.1.Check if you run itEPSS 0.43%Mar 21, 2026