Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.6OneUptime is a solution for monitoring and managing online services.Check if you run itEPSS 0.23%Mar 13, 2026
- High8.1OpenClaw is a personal AI assistant.Check if you run itEPSS 0.16%Mar 13, 2026
- Critical9.3Centrifugo is an open-source scalable real-time messaging server.Check if you run itEPSS 0.27%Mar 13, 2026
- High7.5CairoSVG is an SVG converter based on Cairo, a 2D graphics library.Check if you run itEPSS 0.52%Mar 13, 2026
- Medium6.8JumpServer is an open source bastion host and an operation and maintenance security audit system.Check if you run itEPSS 0.37%Mar 13, 2026
- Critical9.3FreeRDP is a free implementation of the Remote Desktop Protocol.Check if you run itEPSS 0.68%Mar 13, 2026
- Medium5.0JumpServer is an open source bastion host and an operation and maintenance security audit system.Check if you run itEPSS 0.10%Mar 13, 2026
- Medium4.3Gokapi is a self-hosted file sharing server with automatic expiration and encryption support.Check if you run itEPSS 0.26%Mar 13, 2026
- Medium5.3SFTPGo is an open source, event-driven file transfer solution.Check if you run itEPSS 0.33%Mar 13, 2026
- High7.5The Formidable Forms plugin for WordPress is vulnerable to a payment integrity bypass in all versions up to, and including, 6.28.Check if you run itEPSS 0.32%Mar 13, 2026
- Medium6.5Issue summary: An OpenSSL TLS 1.3 server may fail to negotiate the expected preferred key exchange group when its key exchange group configuration includes the default…Check if you run itEPSS 0.45%Mar 13, 2026
- High8.2FreeRDP is a free implementation of the Remote Desktop Protocol.Check if you run itEPSS 0.34%Mar 13, 2026
- High8.2Lexbor is a web browser engine library.Check if you run itEPSS 0.28%Mar 13, 2026
- Critical10.0SandboxJS is a JavaScript sandboxing library.Check if you run itEPSS 0.57%Mar 13, 2026
- High8.5Anchore Enterprise versions before 5.25.1 contain an SQL injection vulnerability in the GraphQL Reports API.Check if you run itEPSS 0.32%Mar 13, 2026
- Medium6.9Improper Handling of Highly Compressed Data (Compression Bomb) vulnerability in Erlang OTP ssh (ssh_transport modules) allows Denial of Service via Resource Depletion.Check if you run itEPSS 0.68%Mar 13, 2026
- Medium6.9wpDiscuz before 7.6.47 contains a missing rate limiting vulnerability that allows unauthenticated attackers to subscribe arbitrary email addresses to post notification…Check if you run itEPSS 0.34%Mar 13, 2026
- Medium5.3wpDiscuz before 7.6.47 contains a cross-site request forgery vulnerability in the getFollowsPage() function that allows attackers to trigger unauthorized actions witho…Check if you run itEPSS 0.16%Mar 13, 2026
- Low2.1wpDiscuz before 7.6.47 contains a cross-site scripting vulnerability that allows attackers to inject malicious code through unescaped attachment URLs in HTML output by…Check if you run itEPSS 0.17%Mar 13, 2026
- Medium5.1wpDiscuz before 7.6.47 contains a cross-site scripting vulnerability in the customCss field that allows administrators to inject malicious scripts by breaking out of style tags.Check if you run itEPSS 0.24%Mar 13, 2026
- Medium6.3wpDiscuz before 7.6.47 contains an email header injection vulnerability that allows attackers to manipulate mail recipients by injecting malicious data into the commen…Check if you run itEPSS 0.24%Mar 13, 2026
- Medium6.9wpDiscuz before 7.6.47 contains an information disclosure vulnerability that allows administrators to inadvertently expose OAuth secrets by exporting plugin options as JSON.Check if you run itEPSS 0.29%Mar 13, 2026
- Medium6.1wpDiscuz before 7.6.47 contains a cross-site request forgery vulnerability that allows attackers to delete all comments associated with an email address by crafting a…Check if you run itEPSS 0.17%Mar 13, 2026
- Medium6.9wpDiscuz before 7.6.47 contains an IP spoofing vulnerability in the getIP() function that allows attackers to bypass IP-based rate limiting and ban enforcement by trus…Check if you run itEPSS 0.16%Mar 13, 2026
- High8.7Voltronic Power SNMP Web Pro version 1.1 contains a pre-authentication path traversal vulnerability in the upload.cgi endpoint that allows unauthenticated attackers to…Check if you run itEPSS 1.04%Mar 13, 2026
Sort