Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5LinkAce is a self-hosted archive to collect website links.Check if you run itEPSS 0.39%Mar 10, 2026
- High8.2MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira).Check if you run itEPSS 1.04%Mar 10, 2026
- High8.7An improper neutralization of special elements vulnerability was identified in GitHub Enterprise Server that allowed an attacker with push access to a repository to ac…Check if you run itEPSS 1.50%Mar 10, 2026
- Medium5.3An improper authorization vulnerability was identified in GitHub Enterprise Server that allowed a user with read access to a repository and write access to a project t…Check if you run itEPSS 0.44%Mar 10, 2026
- Medium6.4The NextScripts: Social Networks Auto-Poster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the shortcode in all versions up to, and including,…Check if you run itEPSS 0.34%Mar 10, 2026
- Medium5.4FileBrowser Quantum is a free, self-hosted, web-based file manager.Check if you run itEPSS 0.38%Mar 10, 2026
- Medium5.3A vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0).Check if you run itEPSS 0.28%Mar 10, 2026
- Unknowndaily_prayer_time_project daily_prayer_time Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 9.04%Mar 10, 2026
- Medium6.3Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.35%Mar 7, 2026
- Critical9.1Soft Serve is a self-hostable Git server for the command line.Check if you run itEPSS 0.41%Mar 7, 2026
- High7.2The Meta Box plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'ajax_delete_file' function in all versions…Check if you run itEPSS 2.39%Mar 7, 2026
- High7.5Homarr is an open-source dashboard.Check if you run itEPSS 1.18%Mar 7, 2026
- High7.5WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval.Check if you run itEPSS 0.36%Mar 7, 2026
- Medium6.1Actions which insert URLs into the content attribute of HTML meta tags are not escaped.Check if you run itEPSS 0.35%Mar 6, 2026
- Low2.5On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference a file outside of the Root in whic…Check if you run itEPSS 0.12%Mar 6, 2026
- Medium4.3OliveTin gives access to predefined shell commands from a web interface.Check if you run itEPSS 0.51%Mar 6, 2026
- Critical9.3Wekan is an open source kanban tool built with Meteor.Check if you run itEPSS 0.43%Mar 6, 2026
- Medium5.3Cryptomator encrypts data being stored on cloud infrastructure.Check if you run itEPSS 0.21%Mar 6, 2026
- Critical9.3Ghostfolio is an open source wealth management software.Check if you run itEPSS 0.36%Mar 6, 2026
- Critical9.2Idno is a social publishing platform.Check if you run itEPSS 0.75%Mar 6, 2026
- Medium6.4The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the post meta value and the block attribute in…Check if you run itEPSS 0.34%Mar 5, 2026
- Critical9.2OpenClaw versions prior to 2026.2.2 fail to properly validate Windows cmd.exe metacharacters in allowlist-gated exec requests (non-default configuration), allowing att…Check if you run itEPSS 0.92%Mar 5, 2026
- Medium6.5The Page and Post Clone plugin for WordPress is vulnerable to SQL Injection via the 'meta_key' parameter in the content_clone() function in all versions up to, and including, 6.3.Check if you run itEPSS 0.43%Mar 5, 2026
- Critical9.3An OS Command Injection vulnerability exists in the web-based Traceroute diagnostic utility of International Datacasting Corporation (IDC) SFX Series SuperFlex Satelli…Check if you run itEPSS 3.02%Mar 4, 2026
- Critical9.3The web-based Ping diagnostic utility (/IDC_Ping/main.cgi) in International Datacasting Corporation (IDC) SFX Series SuperFlex Satellite Receiver Web Management Interf…Check if you run itEPSS 2.59%Mar 4, 2026