Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.8wpForo Forum 2.4.14 contains a stored cross-site scripting vulnerability that allows script injection via forum URL data output into an inline script block using json_…Check if you run itEPSS 0.27%Feb 28, 2026
- Medium6.9wpForo Forum 2.4.14 contains an information disclosure vulnerability that allows unauthenticated users to retrieve private and unapproved forum topics via the global R…Check if you run itEPSS 0.39%Feb 28, 2026
- Medium5.1wpForo Forum 2.4.14 contains a stored cross-site scripting vulnerability that allows authenticated subscribers to upload SVG files as profile avatars through the avata…Check if you run itEPSS 0.25%Feb 28, 2026
- High7.1wpForo Forum 2.4.14 contains a missing capability check vulnerability that allows authenticated users to trigger bulk wpForo usergroup reassignment via the wpforo_sync…Check if you run itEPSS 0.31%Feb 28, 2026
- Medium5.3wpForo Forum 2.4.14 contains a missing authorization vulnerability that allows authenticated subscribers to move, merge, or split any forum topic via the topic_move, t…Check if you run itEPSS 0.25%Feb 28, 2026
- Medium5.3wpForo Forum 2.4.14 contains a missing authorization vulnerability that allows authenticated subscribers to close or reopen any forum topic via the wpforo_close_ajax handler.Check if you run itEPSS 0.30%Feb 28, 2026
- Medium5.3wpForo Forum 2.4.14 contains a missing authorization vulnerability that allows authenticated subscribers to approve or unapprove any forum post via the wpforo_approve_…Check if you run itEPSS 0.30%Feb 28, 2026
- High7.5The WP Mail Logging plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.15.0 via deserialization of untrusted input from…Check if you run itEPSS 0.46%Feb 28, 2026
- Critical9.3openDCIM version 23.04, through commit 4467e9c4, contains an OS command injection vulnerability in report_network_map.php.Patch nowKEVEPSS 6.27%Feb 27, 2026
- Critical9.3openDCIM version 23.04, through commit 4467e9c4, contains a SQL injection vulnerability in Config::UpdateParameter.Check if you run itEPSS 1.07%Feb 27, 2026
- Critical9.3openDCIM version 23.04, through commit 4467e9c4, contains a missing authorization vulnerability in install.php and container-install.php.Patch nowKEVEPSS 1.28%Feb 27, 2026
- High8.0Statmatic is a Laravel and Git powered content management system (CMS).Check if you run itEPSS 0.50%Feb 27, 2026
- Medium6.5Statmatic is a Laravel and Git powered content management system (CMS).Check if you run itEPSS 0.27%Feb 27, 2026
- Medium5.3Featured Image from Content (featured-image-from-content) WordPress plugin versions prior to 1.7 contain an authenticated server-side request forgery vulnerability tha…Check if you run itEPSS 0.27%Feb 27, 2026
- High7.2WeGIA is a web manager for charitable institutions.Patch nowKEVEPSS 3.62%Feb 27, 2026
- Medium6.9malcontent is software for discovering supply-chain compromises through context, differential analysis, and YARA.Check if you run itEPSS 0.41%Feb 27, 2026
- High8.2kaniko is a tool to build container images from a Dockerfile, inside a container or Kubernetes cluster.Check if you run itEPSS 0.68%Feb 27, 2026
- High7.1nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm.Check if you run itEPSS 0.23%Feb 27, 2026
- High7.5Docker Model Runner (DMR) is software used to manage, run, and deploy AI models using Docker.Check if you run itEPSS 0.26%Feb 27, 2026
- High8.8Statmatic is a Laravel and Git powered content management system (CMS).Check if you run itEPSS 0.43%Feb 27, 2026
- Medium6.5Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask.Check if you run itEPSS 0.30%Feb 27, 2026
- Medium6.1PMD is an extensible multilanguage static code analyzer.Check if you run itEPSS 0.34%Feb 27, 2026
- Medium5.5Dify is an open-source LLM app development platform.Check if you run itEPSS 0.69%Feb 27, 2026
- Medium4.8Kiteworks is a private data network (PDN).Check if you run itEPSS 0.38%Feb 27, 2026
- Medium6.5Kiteworks is a private data network (PDN).Check if you run itEPSS 0.47%Feb 27, 2026
Sort