Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.0A command injection vulnerability has been reported to affect several QNAP operating system versions.Check if you run itEPSS 0.64%Mar 11, 2026
- Critical9.8The Datalogics Ecommerce Delivery WordPress plugin before 2.6.60 exposes an unauthenticated REST endpoint that allows any remote user to modify the option without veri…Check if you run itEPSS 0.83%Mar 11, 2026
- High8.8A vulnerability in the command line interface of AOS-CX Switches could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system.Check if you run itEPSS 1.23%Mar 11, 2026
- Medium5.9Sylius is an Open Source eCommerce Framework on Symfony.Check if you run itEPSS 0.31%Mar 10, 2026
- High7.1Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.42%Mar 10, 2026
- Critical9.3Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript.Check if you run itEPSS 0.59%Mar 10, 2026
- High7.5Server-Side Request Forgery (SSRF) vulnerability in pdfmake versions 0.3.0-beta.2 through 0.3.5 allows a remote attacker to obtain sensitive information via the src/UR…Check if you run itEPSS 0.64%Mar 10, 2026
- High8.7An improper neutralization of special elements vulnerability was identified in GitHub Enterprise Server that allowed an attacker with push access to a repository to ac…Check if you run itEPSS 1.50%Mar 10, 2026
- High8.8Coral Server is open collaboration infrastructure that enables communication, coordination, trust and payments for The Internet of Agents.Check if you run itEPSS 0.60%Mar 10, 2026
- Critical9.4rssn is a scientific computing library for Rust, combining a high-performance symbolic computation engine with numerical methods support and physics simulations functionalities.Check if you run itEPSS 0.20%Mar 10, 2026
- High8.7Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.48%Mar 10, 2026
- High8.8Improper input validation in System Center Operations Manager allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 1.10%Mar 10, 2026
- Critical9.4Affected devices do not properly sanitize contents of trace files.Check if you run itEPSS 0.48%Mar 10, 2026
- Medium5.3Admidio is an open-source user management solution.Check if you run itEPSS 0.37%Mar 10, 2026
- Medium4.3Kubewarden is a policy engine for Kubernetes.Check if you run itEPSS 0.33%Mar 10, 2026
- Medium5.6The SAP Customer Checkout application exhibits certain design characteristics that involve locally storing operational data using reversible protection mechanisms.Check if you run itEPSS 0.09%Mar 10, 2026
- Medium5.5ImageMagick is free and open-source software used for editing and manipulating digital images.Check if you run itEPSS 0.15%Mar 10, 2026
- Medium4.4ImageMagick is free and open-source software used for editing and manipulating digital images.Check if you run itEPSS 0.16%Mar 10, 2026
- UnknownSangfor operation_and_maintenance_security_management_system Improper Access ControlPatch nowKEVEPSS 2.04%Mar 10, 2026
- High7.5Due to a programming error, blocklistd leaks a socket descriptor for each adverse event report it receives.Check if you run itEPSS 0.37%Mar 9, 2026
- High7.5If two sibling jails are restricted to separate filesystem trees, which is to say that neither of the two jail root directories is an ancestor of the other, jailed pro…Check if you run itEPSS 0.11%Mar 9, 2026
- Critical9.8WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval.Check if you run itEPSS 0.77%Mar 7, 2026
- Low2.1Sliver is a command and control framework that uses a custom Wireguard netstack.Check if you run itEPSS 0.54%Mar 7, 2026
- High8.6Netmaker makes networks with WireGuard.Check if you run itEPSS 0.47%Mar 7, 2026
- Critical9.3XikeStor SKS8310-8X Network Switch firmware versions 1.04.B07 and prior contain an OS command injection vulnerability in the /goform/PingTestSet endpoint that allows u…Check if you run itEPSS 3.05%Mar 7, 2026