Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.1A vulnerability was found in GreenCMS up to 2.3.Check if you run itEPSS 0.35%Apr 26, 2026
- Low2.1A vulnerability has been found in GreenCMS up to 2.3.Check if you run itEPSS 0.35%Apr 26, 2026
- Low2.0A security flaw has been discovered in CodeAstro Online Job Portal 1.0.Check if you run itEPSS 0.33%Apr 26, 2026
- Low1.9A weakness has been identified in MaxSite CMS up to 109.3.Check if you run itEPSS 0.38%Apr 26, 2026
- Low2.0A vulnerability was identified in pagekit up to 1.0.18.Check if you run itEPSS 0.38%Apr 25, 2026
- Low2.0A vulnerability was detected in JiZhiCMS up to 2.5.6.Check if you run itEPSS 0.33%Apr 25, 2026
- Critical9.9Saltcorn is an extensible, open source, no-code database application builder.Check if you run itEPSS 0.44%Apr 24, 2026
- Medium5.3CyberPanel versions prior to 2.4.5 contain a stored cross-site scripting vulnerability in the AI Scanner dashboard where the POST /api/ai-scanner/callback endpoint lac…Check if you run itEPSS 0.64%Apr 24, 2026
- Critical9.8Dgraph is an open source distributed GraphQL database.Check if you run itEPSS 2.46%Apr 24, 2026
- High8.7Improperly controlled modification of dynamically-determined object attributes in the Cognito User Pool configuration in AWS Ops Wheel before PR #165 allows remote aut…Check if you run itEPSS 0.97%Apr 24, 2026
- Critical9.3Missing JWT signature verification in AWS Ops Wheel allows unauthenticated attackers to forge JWT tokens and gain unintended administrative access to the application,…Check if you run itEPSS 0.42%Apr 24, 2026
- Critical9.3BridgeHead FileStore versions prior to 24A (released in early 2024) expose the Apache Axis2 administration module on network-accessible endpoints with default credenti…Check if you run itEPSS 1.05%Apr 24, 2026
- Medium6.5A Broken Access Control vulnerability exists in ClassroomIO v0.1.13 where an authenticated low-privileged "student" user can access unauthorized course-level informati…Check if you run itEPSS 0.21%Apr 24, 2026
- Medium4.7In Mahara before 24.04.10 and 25 before 25.04.1, an institution administrator or institution support administrator on a multi-tenanted site can masquerade as an instit…Check if you run itEPSS 0.18%Apr 24, 2026
- High8.8In the Linux kernel, the following vulnerability has been resolved: can: gw: fix OOB heap access in cgw_csum_crc8_rel() cgw_csum_crc8_rel() correctly computes bounds-s…Check if you run itEPSS 0.41%Apr 24, 2026
- Low2.4AdaptiveGRC is vulnerable to Stored XSS via text type fields across the forms.Check if you run itEPSS 0.69%Apr 24, 2026
- High8.8Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ, Apache ActiveMQ Broker, Apache ActiveMQ All.Check if you run itEPSS 1.15%Apr 24, 2026
- Medium4.3The Taqnix plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.3.Check if you run itEPSS 0.21%Apr 24, 2026
- Medium4.3The HubSpot All-In-One Marketing - Forms, Popups, Live Chat plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including,…Check if you run itEPSS 0.19%Apr 24, 2026
- Medium5.3The Booking Calendar Contact Form plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.2.63 via the dex_bccf_…Check if you run itEPSS 0.43%Apr 24, 2026
- High8.1The Drag and Drop File Upload for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file upload in versions up to, and including, 1.1.3.Check if you run itEPSS 1.14%Apr 24, 2026
- Medium5.3The HM Books Gallery plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 4.8.0.Check if you run itEPSS 0.42%Apr 24, 2026
- Medium5.3The ExactMetrics – Google Analytics Dashboard for WordPress plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 9.1.2.Check if you run itEPSS 0.52%Apr 24, 2026
- High7.7Kyverno is a policy engine designed for cloud native platform engineering teams.Check if you run itEPSS 0.57%Apr 24, 2026
- Critical9.1Kyverno is a policy engine designed for cloud native platform engineering teams.Check if you run itEPSS 0.57%Apr 24, 2026