Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Admidio is an open-source user management solution.Check if you run itEPSS 0.35%Mar 19, 2026
- High8.8SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.Check if you run itEPSS 0.48%Mar 19, 2026
- Medium4.9SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.Check if you run itEPSS 0.51%Mar 19, 2026
- Medium5.1SiYuan is a personal knowledge management system.Check if you run itEPSS 0.85%Mar 19, 2026
- High7.5OpenClaw versions prior to 2026.3.1 fail to properly handle authentication bootstrap errors during startup, allowing browser-control routes to remain accessible withou…Check if you run itEPSS 0.17%Mar 19, 2026
- Medium6.3OpenClaw versions prior to 2026.2.21 improperly parse the left-most X-Forwarded-For header value when requests originate from configured trusted proxies, allowing atta…Check if you run itEPSS 0.36%Mar 19, 2026
- High7.2Two buffer overflow vulnerabilities existed in the wolfSSL CRL parser when parsing CRL numbers: a heap-based buffer overflow could occur when improperly storing the CR…Check if you run itEPSS 0.63%Mar 19, 2026
- Medium6.5Missing Authorization (CWE-862) in Kibana’s server-side Detection Rule Management can lead to Unauthorized Endpoint Response Action Configuration (host isolation, proc…Check if you run itEPSS 0.34%Mar 19, 2026
- Critical9.8XML::Parser versions through 2.47 for Perl has an off-by-one heap buffer overflow in st_serial_stack.Check if you run itEPSS 0.56%Mar 19, 2026
- High7.5XML::Parser versions through 2.45 for Perl could overflow the pre-allocated buffer size cause a heap corruption (double free or corruption) and crashes.Check if you run itEPSS 0.61%Mar 19, 2026
- Medium5.3The Instant Popup Builder plugin for WordPress is vulnerable to Unauthenticated Arbitrary Shortcode Execution in all versions up to and including 1.1.7.Check if you run itEPSS 0.50%Mar 19, 2026
- Medium4.3The Add Custom Fields to Media plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.3.Check if you run itEPSS 0.20%Mar 19, 2026
- Medium5.4OpenProject is an open-source, web-based project management software.Check if you run itEPSS 0.33%Mar 18, 2026
- Medium6.9HTSlib is a library for reading and writing bioinformatics file formats.Check if you run itEPSS 0.51%Mar 18, 2026
- Critical9.8A command injection vulnerability exists in the web management interface of the WiFi Extender WDR201A (HW V2.1, FW LFMZX28040922V1.02).Check if you run itEPSS 2.05%Mar 18, 2026
- Critical9.8The WiFi Extender WDR201A (HW V2.1, FW LFMZX28040922V1.02) implements a broken authentication mechanism in its web management interface.Check if you run itEPSS 0.71%Mar 18, 2026
- Medium5.4A stored cross-site scripting (XSS) vulnerability exists in the NotChatbot WebChat widget thru 1.4.4.Check if you run itEPSS 0.31%Mar 18, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: liquidio: Initialize netdev pointer before queue setup In setup_nic_devices(), the netdev is a…Check if you run itEPSS 0.12%Mar 18, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: media: dvb-core: fix wrong reinitialization of ringbuffer on reopen dvb_dvr_open() calls dvb_ringbu…Check if you run itEPSS 0.14%Mar 18, 2026
- Medium5.8A flaw was identified in Keycloak, an identity and access management solution, where it improperly follows HTTP redirects when processing certain client configuration requests.Check if you run itEPSS 0.41%Mar 18, 2026
- High7.7A flaw was found in Keycloak.Check if you run itEPSS 0.37%Mar 18, 2026
- High8.5The Angeet ES3 KVM does not properly sanitize user-supplied variables parsed by the 'cfg.lua' script, allowing an authenticated attacker to execute OS-level commands.Check if you run itEPSS 0.69%Mar 17, 2026
- High8.6Perle IOLAN STS/SCS terminal server models with firmware versions prior to 6.0 allow authenticated OS command injection via the restricted shell accessed over Telnet or SSH.Check if you run itEPSS 1.57%Mar 17, 2026
- Medium6.1HTML Injection can be carried out in Product when a web application does not properly check or clean user input before showing it on a webpage.Check if you run itEPSS 0.16%Mar 17, 2026
- Medium6.5A flaw was found in libsoup.Check if you run itEPSS 0.39%Mar 17, 2026