Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Improper handling of configuration values in ZKConfig in Apache ZooKeeper 3.8.5 and 3.9.4 on all platforms allows an attacker to expose sensitive information stored in…Check if you run itEPSS 1.20%Mar 7, 2026
- Medium5.3The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 12.8.3.Check if you run itEPSS 0.32%Mar 7, 2026
- Low2.1Group-Office is an enterprise customer relationship management and groupware tool.Check if you run itEPSS 0.27%Mar 6, 2026
- Medium5.4Kestra is an event-driven orchestration platform.Check if you run itEPSS 0.36%Mar 6, 2026
- Medium5.3OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI.Check if you run itEPSS 0.43%Mar 6, 2026
- Medium5.4LangBot is a global IM bot platform designed for LLMs.Check if you run itEPSS 0.28%Mar 6, 2026
- Medium6.4Chamilo is a learning management system.Check if you run itEPSS 0.18%Mar 6, 2026
- Medium5.4MarkUs is a web application for the submission and grading of student assignments.Check if you run itEPSS 0.43%Mar 5, 2026
- Medium6.1Wagtail is an open source content management system built on Django.Check if you run itEPSS 0.61%Mar 5, 2026
- Medium6.9Gogs is an open source self-hosted Git service.Check if you run itEPSS 0.34%Mar 5, 2026
- High8.2python-markdown: denial of service via malformed HTML-like sequencesCheck if you run itEPSS 0.59%Mar 5, 2026
- Low2.0A Stored HTML Injection vulnerability was discovered in the CMC's Sensor Map functionality due to improper validation on connected Guardians' properties.Check if you run itEPSS 0.18%Mar 4, 2026
- Low2.1A Stored HTML Injection vulnerability was discovered in the Alerted Nodes Dashboard functionality due to improper validation on an input parameter.Check if you run itEPSS 0.17%Mar 4, 2026
- Medium6.4The My Calendar – Accessible Event Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the attribute of the shortcode in all versions up to,…Check if you run itEPSS 0.28%Mar 4, 2026
- Medium4.8In Concrete CMS below version 9.4.8, A stored cross-site scripting (XSS) vulnerability exists in the search block where page names and content are rendered without pro…Check if you run itEPSS 0.28%Mar 4, 2026
- Medium5.4HomeBox is a home inventory and organization system.Check if you run itEPSS 0.25%Mar 3, 2026
- Medium6.1AliasVault is a privacy-first password manager with built-in email aliasing.Check if you run itEPSS 0.38%Mar 3, 2026
- High8.1OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.45%Mar 3, 2026
- Medium5.1Dify is an open-source LLM app development platform.Check if you run itEPSS 0.23%Mar 3, 2026
- High7.4In drawLayersInternal of SkiaRenderEngine.cpp, there is a possible way to access the GPU cache due to side channel information disclosure.Check if you run itEPSS 0.09%Mar 2, 2026
- High8.8The Master Addons for Elementor Premium plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.1.3 via the 'JLTMA_Widget_A…Check if you run itEPSS 1.06%Mar 2, 2026
- Medium5.3NocoDB is software for building databases as spreadsheets.Check if you run itEPSS 0.25%Mar 2, 2026
- Medium5.3NocoDB is software for building databases as spreadsheets.Check if you run itEPSS 0.25%Mar 2, 2026
- Medium5.3NocoDB is software for building databases as spreadsheets.Check if you run itEPSS 0.25%Mar 2, 2026
- Medium5.3NocoDB is software for building databases as spreadsheets.Check if you run itEPSS 0.25%Mar 2, 2026