Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.4OpenViking versions 0.2.1 and prior, fixed in commit 46b3e76, contain a path traversal vulnerability in the .ovpack import handling that allows attackers to write file…Check if you run itEPSS 0.21%Mar 3, 2026
- High7.5An issue was discovered in 6.0 before 6.0.3, 5.2 before 5.2.12, and 4.2 before 4.2.29.Check if you run itEPSS 0.84%Mar 3, 2026
- Medium6.9A vulnerability in WatchGuard Fireware OS may allow an attacker to bypass the Fireware OS filesystem integrity check and maintain limited persistence via a maliciously…Check if you run itEPSS 0.32%Mar 3, 2026
- Low1.9A weakness has been identified in xlnt-community xlnt up to 1.6.1.Check if you run itEPSS 0.22%Mar 3, 2026
- Critical9.8OpenMQ exposes a TCP-based management service (imqbrokerd) that by default requires authentication.Check if you run itEPSS 0.46%Mar 3, 2026
- Low2.9A vulnerability was found in Dataease SQLBot up to 1.5.1.Check if you run itEPSS 0.21%Mar 3, 2026
- Low2.0Versions of the package mailparser before 3.9.3 are vulnerable to Cross-site Scripting (XSS) via the textToHtml() function due to the improper sanitisation of URLs in…Check if you run itEPSS 0.36%Mar 3, 2026
- Low1.9Versions of the package @tootallnate/once before 3.0.1 are vulnerable to Incorrect Control Flow Scoping in promise resolving when AbortSignal option is used.Check if you run itEPSS 0.13%Mar 3, 2026
- High8.8The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.33.5 via the locate_template() function.Check if you run itEPSS 1.04%Mar 3, 2026
- High8.8The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to privilege escalation via password reset in all versions up to…Check if you run itEPSS 0.34%Mar 3, 2026
- Medium5.3The AI ChatBot with ChatGPT and Content Generator by AYS plugin for WordPress is vulnerable to unauthorized access and modification of data due to missing capability c…Check if you run itEPSS 0.36%Mar 3, 2026
- High8.7Improper certificate validation in PKCS7_verify() in AWS-LC allows an unauthenticated user to bypass certificate chain verification when processing PKCS7 objects with…Check if you run itEPSS 0.74%Mar 2, 2026
- Medium6.9AFFiNE is an open-source, all-in-one workspace and an operating system.Check if you run itEPSS 0.20%Mar 2, 2026
- Critical9.8code-projects Simple Gym Management System v1.0 is vulnerable to SQL Injection in /gym/trainer_search.php.Check if you run itEPSS 0.37%Mar 2, 2026
- High8.4In createRequest of MediaProvider.java, there is a possible way for an app to gain read/write access to non-existing files due to a logic error in the code.Check if you run itEPSS 0.11%Mar 2, 2026
- High8.4In parsePermissionGroup of ParsedPermissionUtils.java, there is a possible way to bypass a consent dialog to obtain permissions due to a permissions bypass.Check if you run itEPSS 0.10%Mar 2, 2026
- High8.8In broadcastIntentLockedTraced of BroadcastController.java, there is a possible way to launch arbitrary activities from the background on the paired companion phone du…Check if you run itEPSS 0.13%Mar 2, 2026
- High7.5The Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe plugin for WordPress is vulnerable to blind SQL Injection via the ‘cgLostPasswordEmail’ an…Check if you run itEPSS 1.12%Mar 2, 2026
- High8.5Improper input handling in the administration web interface on TP-Link Deco BE25 v1.0 allows crafted input to be executed as part of an OS command.Check if you run itEPSS 0.32%Mar 2, 2026
- Critical9.3Bytebase vulnerable to Improper AuthenticationCheck if you run itEPSS 0.61%Mar 2, 2026
- Low2.7NocoDB is software for building databases as spreadsheets.Check if you run itEPSS 0.23%Mar 2, 2026
- Low2.7NocoDB is software for building databases as spreadsheets.Check if you run itEPSS 0.65%Mar 2, 2026
- Medium5.3NocoDB is software for building databases as spreadsheets.Check if you run itEPSS 0.17%Mar 2, 2026
- Critical9.9ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI.Check if you run itEPSS 0.47%Mar 2, 2026
- Medium6.5ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI.Check if you run itEPSS 0.27%Mar 2, 2026
Sort