Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.5n8n-MCP is a Model Context Protocol (MCP) server that provides AI assistants with comprehensive access to n8n node documentation, properties, and operations.Check if you run itEPSS 0.43%Apr 9, 2026
- High7.1Mercure is a protocol for pushing data updates to web browsers and other HTTP clients in a battery-efficient way.Check if you run itEPSS 0.42%Apr 9, 2026
- High7.0Axios is a promise based HTTP client for the browser and Node.js.Check if you run itEPSS 1.19%Apr 9, 2026
- Medium5.3A vulnerability was detected in openstatusHQ openstatus up to 1b678e71a85961ae319cbb214a8eae634059330c.Check if you run itEPSS 0.49%Apr 8, 2026
- Medium5.3Frappe Learning Management System (LMS) is a learning system that helps users structure their content.Check if you run itEPSS 0.28%Apr 8, 2026
- High7.1LobeHub is a work-and-lifestyle space to find, build, and collaborate with agent teammates that grow with you.Check if you run itEPSS 0.19%Apr 8, 2026
- Medium5.3Zammad is a web based open source helpdesk/customer support system.Check if you run itEPSS 0.25%Apr 8, 2026
- Critical9.8The ProSolution WP Client plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'proSol_fileUploadProcess' function i…Check if you run itEPSS 1.07%Apr 8, 2026
- Medium5.4The Advanced Contact form 7 DB plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.9.Check if you run itEPSS 0.14%Apr 8, 2026
- Medium4.3Incorrect Authorization (CWE-863) in Kibana can lead to cross-space information disclosure via Privilege Abuse (CAPEC-122).Check if you run itEPSS 0.29%Apr 8, 2026
- High7.5rfc3161-client is a Python library implementing the Time-Stamp Protocol (TSP) described in RFC 3161.Check if you run itEPSS 0.21%Apr 8, 2026
- Medium5.9Axios is a promise based HTTP client for the browser and Node.js.Check if you run itEPSS 0.75%Apr 8, 2026
- Medium6.3Hono is a Web application framework that provides support for any JavaScript runtime.Check if you run itEPSS 0.40%Apr 8, 2026
- High7.4In Eclipse Jetty, the class JASPIAuthenticator initiates the authentication checks, which set two ThreadLocal variable.Check if you run itEPSS 0.61%Apr 8, 2026
- Medium4.3The BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versio…Check if you run itEPSS 0.16%Apr 8, 2026
- Medium6.5The BEAR – Bulk Editor and Products Manager Professional for WooCommerce by Pluginus.Net plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versio…Check if you run itEPSS 0.18%Apr 8, 2026
- Medium5.3Missing Authorization vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows Exploiting Incorrectly Configured Access Control Security Le…Check if you run itEPSS 0.29%Apr 8, 2026
- Medium4.3The Quran Translations plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7.Check if you run itEPSS 0.19%Apr 8, 2026
- High8.8The Product Feed PRO for WooCommerce by AdTribes – Product Feeds for WooCommerce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions 13.4.6 th…Check if you run itEPSS 0.21%Apr 8, 2026
- Medium4.7The Gravity Forms plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the parameter in the AJAX action in all versions up to, and including, 2.9.30.Check if you run itEPSS 0.39%Apr 8, 2026
- Medium5.4The Download Monitor plugin for WordPress is vulnerable to Cross-Site Request Forgery in the and methods in in all versions up to, and including, 5.1.10.Check if you run itEPSS 0.19%Apr 8, 2026
- Medium6.9An insufficient granularity of access control vulnerability exists in PingIDM (formerly ForgeRock Identity Management) where administrators cannot properly configure a…Check if you run itEPSS 0.24%Apr 7, 2026
- Critical9.0SiYuan is a personal knowledge management system.Check if you run itEPSS 0.65%Apr 7, 2026
- High7.6MCP Java SDK is the official Java SDK for Model Context Protocol servers and clients.Check if you run itEPSS 0.20%Apr 7, 2026
- Low3.3Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.Check if you run itEPSS 0.14%Apr 7, 2026