Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical10.0Step CA is an online certificate authority for secure, automated certificate management for DevOps.Check if you run itEPSS 0.31%Mar 19, 2026
- Critical9.8ormar is a async mini ORM for Python.Check if you run itEPSS 1.21%Mar 19, 2026
- Medium5.1Discourse is an open-source discussion platform.Check if you run itEPSS 0.34%Mar 19, 2026
- Medium5.1Discourse is an open-source discussion platform.Check if you run itEPSS 0.36%Mar 19, 2026
- Medium6.9Discourse is an open-source discussion platform.Check if you run itEPSS 0.34%Mar 19, 2026
- Medium5.3Discourse is an open-source discussion platform.Check if you run itEPSS 0.96%Mar 19, 2026
- Medium5.4Discourse is an open source discussion platform.Check if you run itEPSS 0.19%Mar 19, 2026
- Critical9.1OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 1.96%Mar 19, 2026
- Medium4.3Protection mechanism failure in wolfCrypt post-quantum implementations (ML-KEM and ML-DSA) in wolfSSL on ARM Cortex-M microcontrollers allows a physical attacker to co…Check if you run itEPSS 0.16%Mar 19, 2026
- Medium6.5Missing Authorization (CWE-862) in Kibana’s server-side Detection Rule Management can lead to Unauthorized Endpoint Response Action Configuration (host isolation, proc…Check if you run itEPSS 0.20%Mar 19, 2026
- Low2.2A stack buffer overflow vulnerability exists in wolfSSL's PKCS7 SignedData encoding functionality.Check if you run itEPSS 0.10%Mar 19, 2026
- High7.5A path traversal and arbitrary file write vulnerability exist in the embedded get function in '_main_.py' in PyMuPDF version, 1.26.5.Check if you run itEPSS 0.37%Mar 19, 2026
- Medium5.1OPEXUS eComplaint and eCASE before 10.2.0.0 do not correctly sanitize the contents of the "Name of Organization" field when filling out case information.Check if you run itEPSS 0.14%Mar 19, 2026
- Medium5.1OPEXUS eComplaint and eCASE before 10.2.0.0 do not correctly sanitize the contents of first and last name fields in the 'My Information' screen.Check if you run itEPSS 0.14%Mar 19, 2026
- Medium5.3OPEXUS eComplaint before version 10.1.0.0 allows an unauthenticated attacker to obtain or guess an existing case number and upload arbitrary files via 'Portal/EEOC/Doc…Check if you run itEPSS 0.20%Mar 19, 2026
- Medium5.1OPEXUS eComplaint and eCASE before 10.2.0.0 do not correctly sanitize the contents of first and last name fields in a user profile.Check if you run itEPSS 0.14%Mar 19, 2026
- Critical9.2OPEXUS eComplaint and eCASE before version 10.1.0.0 include the secret verification code in the HTTP response when requesting a password reset via 'ForcePasswordReset.aspx'.Check if you run itEPSS 0.31%Mar 19, 2026
- Medium5.1Location Aware Sensor System by Linkit ONE, up to commit f06bd20 (2023-04-26), contains a reflected cross-site scripting vulnerability in the PM25.php file that allows…Check if you run itEPSS 0.43%Mar 19, 2026
- High8.8Devome GRR v4.5.0 was discovered to contain multiple authenticated SQL injection vulnerabilities in the include/session.inc.php file via the referer and user-agent.Check if you run itEPSS 0.26%Mar 19, 2026
- High8.7BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a deserialization of untrusted data vulnerability in the ASP.NET servlet's VIEWSTATE handling that a…Check this weekEPSS 34.36%Mar 19, 2026
- Medium5.3BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a blind server-side request forgery vulnerability in the externalfeed/RSS API component that allows…Check this weekEPSS 12.92%Mar 19, 2026
- Medium5.3BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a blind server-side request forgery vulnerability in the searchWeb API component that allows authent…Check this weekEPSS 17.43%Mar 19, 2026
- Medium6.9bmc footprints Missing Authentication for Critical FunctionPatch nowKEVEPSS 44.58%Mar 19, 2026
- High7.5The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to SQL Injection via the 'fields' parameter in all ve…Check if you run itEPSS 0.32%Mar 19, 2026
- High8.6Improper Restriction of XML External Entity Reference vulnerability in XMLUtils.java in Slovensko.Digital Autogram allows remote unauthenticated attacker to conduct SS…Check if you run itEPSS 0.33%Mar 19, 2026
Sort