Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1RealtyScript 4.0.2 Cross-Site Scripting via Multiple ParametersCheck if you run itEPSS 0.29%Mar 15, 2026
- Medium6.9RealtyScript 4.0.2 Multiple Cross-Site Request Forgery and Persistent Cross-Site Scripting VulnerabilitiesCheck if you run itEPSS 0.19%Mar 15, 2026
- High8.7Qool CMS Multiple Persistent Cross-Site Scripting VulnerabilitiesCheck if you run itEPSS 0.37%Mar 15, 2026
- Medium6.9Qool CMS 2.0 RC2 Cross-Site Request Forgery via adduserCheck if you run itEPSS 0.24%Mar 15, 2026
- UnknownRisk of Buffer Overflow Vulnerability when installed from source on Windows R < 4.2Open the advisoryMar 13, 2026
- Medium6.7A flaw was found in systemd.Check if you run itEPSS 0.15%Mar 13, 2026
- High8.7Path Traversal in Clasp impacting versions < 3.2.0 allows a remote attacker to perform remote code execution via a malicious Google Apps Script project containing spec…Check if you run itEPSS 0.47%Mar 13, 2026
- High7.2Use of Hard-coded Credentials vulnerability in Avantra allows Accessing Functionality Not Properly Constrained by ACLs.Check if you run itEPSS 0.22%Mar 13, 2026
- High7.5NSquared simply_schedule_appointments Missing AuthorizationPatch nowKEVEPSS 0.31%Mar 13, 2026
- Medium5.7In JetBrains Datalore before 2026.1 session hijacking was possible due to missing secure attribute for cookie settingsCheck if you run itEPSS 0.10%Mar 13, 2026
- Medium6.9OneUptime is a solution for monitoring and managing online services.Check if you run itEPSS 0.24%Mar 13, 2026
- High7.5PyJWT is a JSON Web Token implementation in Python.Check if you run itEPSS 0.28%Mar 13, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force Astra Bulk Edit astra-bulk-edit allows DOM-Based…Check if you run itEPSS 0.17%Mar 13, 2026
- Medium6.4Server-Side Request Forgery (SSRF) vulnerability in MailerPress Team MailerPress mailerpress allows Server Side Request Forgery.This issue affects MailerPress: from n/…Check if you run itEPSS 0.18%Mar 13, 2026
- High7.5Ella Core is a 5G core designed for private networks.Check if you run itEPSS 0.19%Mar 13, 2026
- High7.6OneUptime is a solution for monitoring and managing online services.Check if you run itEPSS 0.23%Mar 13, 2026
- High8.1OpenClaw is a personal AI assistant.Check if you run itEPSS 0.16%Mar 13, 2026
- Critical9.3Centrifugo is an open-source scalable real-time messaging server.Check if you run itEPSS 0.27%Mar 13, 2026
- High7.5CairoSVG is an SVG converter based on Cairo, a 2D graphics library.Check if you run itEPSS 0.52%Mar 13, 2026
- Medium6.8JumpServer is an open source bastion host and an operation and maintenance security audit system.Check if you run itEPSS 0.37%Mar 13, 2026
- Critical9.3FreeRDP is a free implementation of the Remote Desktop Protocol.Check if you run itEPSS 0.68%Mar 13, 2026
- Medium5.0JumpServer is an open source bastion host and an operation and maintenance security audit system.Check if you run itEPSS 0.10%Mar 13, 2026
- Medium4.3Gokapi is a self-hosted file sharing server with automatic expiration and encryption support.Check if you run itEPSS 0.26%Mar 13, 2026
- Medium5.3SFTPGo is an open source, event-driven file transfer solution.Check if you run itEPSS 0.33%Mar 13, 2026
- High7.5The Formidable Forms plugin for WordPress is vulnerable to a payment integrity bypass in all versions up to, and including, 6.28.Check if you run itEPSS 0.32%Mar 13, 2026
Sort