Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8n8n is an open source workflow automation platform.Check if you run itEPSS 0.33%Mar 25, 2026
- High8.5n8n is an open source workflow automation platform.Check if you run itEPSS 0.40%Mar 25, 2026
- Critical9.4n8n is an open source workflow automation platform.Check if you run itEPSS 0.97%Mar 25, 2026
- High8.7Multiple Stored XSS vulnerabilities exist in Seafile Server version 13.0.15,13.0.16-pro,12.0.14 and prior and fixed in 13.0.17, 13.0.17-pro, and 12.0.20-pro, via the S…Check if you run itEPSS 0.29%Mar 25, 2026
- High7.1n8n is an open source workflow automation platform.Check if you run itEPSS 0.27%Mar 25, 2026
- High7.5Insertion of Sensitive Information Into Sent Data vulnerability in Noor Alam SMTP Mailer smtp-mailer allows Retrieve Embedded Sensitive Data.This issue affects SMTP Ma…Check if you run itEPSS 0.25%Mar 25, 2026
- Medium6.5Missing Authorization vulnerability in codepeople Contact Form Email contact-form-to-email allows Exploiting Incorrectly Configured Access Control Security Levels.This…Check if you run itEPSS 0.31%Mar 25, 2026
- High7.5Kiteworks is a private data network (PDN).Check if you run itEPSS 0.25%Mar 25, 2026
- Medium4.6Mattermost versions 11.2.x <= 11.2.2, 10.11.x <= 10.11.10, 11.4.x <= 11.4.0, 11.3.x <= 11.3.1 fail to properly validate CSRF tokens in the /api/v4/access_control_polic…Check if you run itEPSS 0.13%Mar 25, 2026
- Medium6.1Mattermost versions 11.4.x <= 11.4.0, 11.3.x <= 11.3.1, 11.2.x <= 11.2.3, 10.11.x <= 10.11.11 fail to properly validate user identity in the OpenID {{IsSameUser()}} co…Check if you run itEPSS 0.18%Mar 25, 2026
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes The Aisle Core theaisle-core all…Check if you run itEPSS 0.42%Mar 25, 2026
- Medium6.5Missing Authorization vulnerability in Kaira StoreCustomizer woocustomizer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects S…Check if you run itEPSS 0.38%Mar 25, 2026
- Medium6.5Mattermost versions 11.4.x <= 11.4.0, 11.3.x <= 11.3.1, 11.2.x <= 11.2.3, 10.11.x <= 10.11.11 fail to rate limit login requests which allows unauthenticated remote att…Check if you run itEPSS 0.31%Mar 25, 2026
- Medium6.5Missing Authorization vulnerability in CRM Perks Integration for Mailchimp and Contact Form 7, WPForms, Elementor, Ninja Forms cf7-mailchimp allows Exploiting Incorrec…Check if you run itEPSS 0.33%Mar 25, 2026
- Critical9.9Improper Validation of Specified Quantity in Input vulnerability in GalleryCreator SimpLy Gallery simply-gallery-block allows Accessing Functionality Not Properly Cons…Check if you run itEPSS 0.46%Mar 25, 2026
- Critical9.8Deserialization of Untrusted Data vulnerability in park_of_ideas Tasty Daily tastydaily allows Object Injection.This issue affects Tasty Daily: from n/a through < 1.27.Check if you run itEPSS 0.39%Mar 25, 2026
- Medium6.5Kiteworks is a private data network (PDN).Check if you run itEPSS 0.33%Mar 25, 2026
- High7.5Mattermost versions 11.4.x <= 11.4.0, 11.3.x <= 11.3.1, 11.2.x <= 11.2.3, 10.11.x <= 10.11.11 fail to prevent rendering of external SVGs on link embeds which allows un…Check if you run itEPSS 0.36%Mar 25, 2026
- Critical9.8thumbler through 1.1.2 allows OS command injection via the input, output, time, or size parameter in the thumbnail() function because user input is concatenated into a…Check if you run itEPSS 2.40%Mar 25, 2026
- Medium5.4A vulnerability in the Lobby Ambassador web-based management API of Cisco IOS XE Software could allow an authenticated, remote attacker to elevate their privileges and…Check if you run itEPSS 0.35%Mar 25, 2026
- Medium5.3A vulnerability in the web-based Cisco IOx application hosting environment management interface of Cisco IOS XE Software could allow an unauthenticated, remote attacke…Check if you run itEPSS 0.37%Mar 25, 2026
- Medium4.8A vulnerability in the web-based Cisco IOx application hosting environment management interface of Cisco IOS XE Software could allow an authenticated, remote attacker…Check if you run itEPSS 0.25%Mar 25, 2026
- Medium6.5A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected device.Check if you run itEPSS 0.13%Mar 25, 2026
- Medium5.4A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to conduct a cross-site scripting…Check if you run itEPSS 0.17%Mar 25, 2026
- Medium6.1A vulnerability in the bootloader of Cisco IOS XE Software for Cisco Catalyst 9200 Series Switches, Cisco Catalyst ESS9300 Embedded Series Switches, Cisco Catalyst IE9…Check if you run itEPSS 0.16%Mar 25, 2026
Sort