Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.7Notepad++ Download of Code Without Integrity Check VulnerabilityPatch nowKEVEPSS 1.77%Feb 2, 2026
- Unknownevenroute iqrouter_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.23%Jan 23, 2026
- Critical9.9Hackage package and doc upload stored XSS vulnerabilityCheck if you run itEPSS 0.43%Jan 16, 2026
- Medium6.6Spinnaker is an open source, multi-cloud continuous delivery platform.Check if you run itEPSS 0.17%Jan 5, 2026
- Unknownninjaforms ninja_forms Authorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 0.44%Dec 17, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: bpf: Add bpf_prog_run_data_pointers() syzbot found that cls_bpf_classify() is able to change tc_skb…Check if you run itEPSS 0.21%Dec 16, 2025
- High8.4Lightning Flow Scanner provides a A CLI plugin, VS Code Extension and GitHub Action for analysis and optimization of Salesforce Flows.Check if you run itEPSS 0.19%Dec 12, 2025
- Low2.7A flaw was found in Keycloak Admin REST (Representational State Transfer) API.Check if you run itEPSS 0.35%Dec 10, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: btrfs: ensure no dirty metadata is written back for an fs with errors [BUG] During development of a…Check if you run itEPSS 0.14%Dec 8, 2025
- Medium4.3Nextcloud Tables allows you to create your own tables with individual columns.Check if you run itEPSS 0.28%Dec 5, 2025
- High7.1Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Open the advisoryDec 4, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: xfs: fix out of bounds memory read error in symlink repair xfs/286 produced this report on my test…Open the advisoryDec 4, 2025
- Medium6.4The Autoptimize plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the LCP Image to preload metabox in all versions up to, and including, 3.1.13 due…Open the advisoryDec 3, 2025
- Medium6.5The Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI plugin for WordPress is vulnerable to time-based SQL Injection via the "getTermsForAjax" function i…Open the advisoryDec 3, 2025
- High8.8A flaw was found in the ABRT daemon’s handling of user-supplied mount information.ABRT copies up to 12 characters from an untrusted input and places them directly into…Open the advisoryDec 3, 2025
- Low2.7The Timetable and Event Schedule by MotoPress WordPress plugin before 2.4.16 does not verify a user has access to a specific event when duplicating, leading to arbitra…Open the advisoryDec 3, 2025
- Critical10.0Meta React Server Components Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.80%Dec 3, 2025
- Critical9.8MCP Watch is a comprehensive security scanner for Model Context Protocol (MCP) servers.Open the advisoryDec 1, 2025
- Unknownparseplatform parse-server Exposure of Sensitive System Information to an Unauthorized Control SpherePatch nowKEVEPSS 0.96%Dec 1, 2025
- UnknownDitty WordPress Plugin Unauthenticated Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 19.59%Nov 14, 2025
- Critical9.9Typebot is an open-source chatbot builder.Open the advisoryNov 13, 2025
- High7.5In the Linux kernel, the following vulnerability has been resolved: bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} Cilium has a BPF egress gateway feature whic…Check if you run itEPSS 0.62%Nov 12, 2025
- Medium4.3IBM OpenPages 9.0 and 9.1 is vulnerable to information disclosure of sensitive information due to a weaker than expected security for certain REST end points used by t…Open the advisoryNov 12, 2025
- Unknownamttgroup hibos Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 7.36%Oct 22, 2025
- Unknownairlink101 skyipcam1620w_wireless_n_mpeg4_3gpp_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 16.99%Oct 19, 2025