Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3The Games Catalog plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.0.Check if you run itEPSS 0.20%May 20, 2026
- Medium4.3The Bigfishgames Syndicate plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.Check if you run itEPSS 0.19%May 20, 2026
- Medium4.3The Bottom Bar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 0.1.7.Check if you run itEPSS 0.22%May 20, 2026
- Medium4.3The Child Height Predictor by Ostheimer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 1.3.Check if you run itEPSS 0.20%May 20, 2026
- Medium6.1The Word 2 Cash plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to Stored Cross-Site Scripting in versions up to and including 0.9.2.Check if you run itEPSS 0.18%May 20, 2026
- Medium5.4The Nexa Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Server-Side Request Forgery (SSRF) in versions up to…Check if you run itEPSS 0.41%May 20, 2026
- Medium6.1The Sentence To SEO (keywords, description and tags) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.Check if you run itEPSS 0.21%May 20, 2026
- Medium6.4The 診断ジェネレータ作成プラグイン (Diagnosis Generator) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'js' parameter in versions up to and including 1.4.16.Check if you run itEPSS 0.41%May 20, 2026
- Medium5.5Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases.Check if you run itEPSS 0.16%May 20, 2026
- Medium6.8Trilium Notes is an open-source, cross-platform hierarchical note taking application for building large personal knowledge bases.Check if you run itEPSS 0.73%May 20, 2026
- Medium5.7Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks.Check if you run itEPSS 0.36%May 19, 2026
- Medium5.3Mantis Bug Tracker (MantisBT) is an open source issue tracker.Check if you run itEPSS 0.44%May 19, 2026
- High8.1CtrlPanel is open-source billing software for hosting providers.Check if you run itEPSS 0.39%May 19, 2026
- Medium6.5CtrlPanel is open-source billing software for hosting providers.Check if you run itEPSS 0.35%May 19, 2026
- Medium6.6CtrlPanel is open-source billing software for hosting providers.Check if you run itEPSS 0.69%May 19, 2026
- Medium5.5Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks.Check if you run itEPSS 0.16%May 19, 2026
- Medium6.5Faraday is an HTTP client library abstraction layer that provides a common interface over many adapters.Check if you run itEPSS 0.29%May 19, 2026
- High8.8In ScadaBR version 1.2.0, a Missing Authentication for Critical Function vulnerability could allow an unauthenticated attacker to send a HTTP GET requests to the SCADA…Check if you run itEPSS 0.58%May 19, 2026
- Critical9.2Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via external URL resolution in uploaded IaC templates when running in server mode.Check if you run itEPSS 0.61%May 19, 2026
- Critical9.2Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via the remote_url parameter in the remote directory scan endpoint (POST /v1/{iac}/{ia…Check if you run itEPSS 0.59%May 19, 2026
- High8.7Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via the webhook_url parameter in the file scan endpoint (POST /v1/{iac}/{iacVersion}/{…Check if you run itEPSS 0.61%May 19, 2026
- Medium6.5Firefox for iOS hosted Reader mode on an unauthenticated local web server, allowing another application on the same device to request arbitrary URLs and receive the re…Check if you run itEPSS 0.23%May 19, 2026
- Critical9.8The LalanaChami Pharmacy Management System (commit 5c3d028) allows unauthenticated remote attackers to escalate privileges by self-assigning an administrative role dur…Check if you run itEPSS 0.63%May 19, 2026
- Critical9.8scalar/astro v0.1.13 was discovered to contain a Server-Side Request Forgery (SSRF) in the scalar_url query parameter of the Scalar Proxy endpoint.Check if you run itEPSS 0.63%May 19, 2026
- Critical9.2NGINX JavaScript has a vulnerability when the js_fetch_proxy directive is configured with at least one client-controlled NGINX variable (for example, $http_*, $arg_*,…Check if you run itEPSS 0.79%May 19, 2026