Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.8dr_libs dr_wav.h version 0.14.4 and earlier (fixed in commit 8a7258c) contain a heap buffer overflow vulnerability in the drwav__read_smpl_to_metadata_obj() function o…Check if you run itEPSS 0.24%Mar 3, 2026
- High7.2Multiple authenticated OS command injection vulnerabilities exist in the Cohesity (formerly Stone Ram) TranZman 4.0 Build 14614 through TZM_1757588060_SEP2025_FULL.dep…Check if you run itEPSS 3.75%Mar 3, 2026
- Medium6.4The Blocksy theme for WordPress is vulnerable to Stored Cross-Site Scripting via the metadata fields in all versions up to, and including, 2.1.30 due to insufficient i…Check if you run itEPSS 0.27%Mar 2, 2026
- Low2.7Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata.Check if you run itEPSS 0.42%Mar 2, 2026
- Low2.7Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata.Check if you run itEPSS 0.64%Mar 2, 2026
- Low2.7Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata.Check if you run itEPSS 0.52%Mar 2, 2026
- High7.8In VBMeta, there is a possible way to modify and resign VBMeta using a test key, assuming the original image was previously signed with the same key.Check if you run itEPSS 0.09%Mar 2, 2026
- High8.6Statmatic is a Laravel and Git powered content management system (CMS).Check if you run itEPSS 0.48%Feb 27, 2026
- High8.6Gradio is an open-source Python package designed for quick prototyping.Check if you run itEPSS 0.36%Feb 27, 2026
- Medium6.5Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask.Check if you run itEPSS 0.36%Feb 27, 2026
- Medium6.5n authorization flaw in Foreman's GraphQL API allows low-privileged users to access metadata beyond their assigned permissions.Check if you run itEPSS 0.36%Feb 27, 2026
- Low2.1A weakness has been identified in Sanluan PublicCMS 6.202506.d.Check if you run itEPSS 0.90%Feb 27, 2026
- Medium5.3The WP Recipe Maker plugin for WordPress is vulnerable to an Insecure Direct Object Reference (IDOR) in versions up to, and including, 10.3.2.Check if you run itEPSS 0.26%Feb 27, 2026
- High7.3Zen C is a systems programming language that compiles to human-readable GNU C/C11.Check if you run itEPSS 1.16%Feb 26, 2026
- Low1.3Discourse is an open source discussion platform.Check if you run itEPSS 0.27%Feb 26, 2026
- Medium4.9Discourse is an open source discussion platform.Check if you run itEPSS 0.40%Feb 26, 2026
- Medium5.3The User Registration & Membership – Custom Registration Form, Login Form, and User Profile plugin for WordPress is vulnerable to Insecure Direct Object Reference in a…Check if you run itEPSS 0.19%Feb 26, 2026
- Medium4.8Audiobookshelf is a self-hosted audiobook and podcast server.Check if you run itEPSS 0.32%Feb 26, 2026
- Medium4.8Audiobookshelf is a self-hosted audiobook and podcast server.Check if you run itEPSS 0.33%Feb 26, 2026
- High8.1The User Registration & Membership plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 5.1.2.Check if you run itEPSS 0.37%Feb 26, 2026
- Medium4.4The WP Social Meta plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.0.1 due to insufficient…Check if you run itEPSS 0.21%Feb 26, 2026
- Medium4.8Audiobookshelf is a self-hosted audiobook and podcast server.Check if you run itEPSS 0.29%Feb 26, 2026
- Medium4.3Packistry is a self-hosted Composer repository designed to handle PHP package distribution.Check if you run itEPSS 0.34%Feb 26, 2026
- High7.7The Terraform Provider for Linode versions prior to v3.9.0 logged sensitive information including some passwords, StackScript content, and object storage data in debug…Check if you run itEPSS 0.60%Feb 26, 2026
- Medium4.9Bitnami Sealed Secrets is vulnerable to a scope-widening attack during the secret rotation (/v1/rotate) flow.Check if you run itEPSS 0.37%Feb 26, 2026