Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.9FreeScout is a free self-hosted help desk and shared mailbox.Check if you run itEPSS 0.73%Apr 21, 2026
- High7.2Visitor Management System 1.0 by sanjay1313 is vulnerable to Unrestricted File Upload in vms/php/admin_user_insert.php and vms/php/update_1.php.Check if you run itEPSS 0.86%Apr 21, 2026
- Medium4.9Encrypted values in Fortra's GoAnywhere MFT prior to version 7.10.0 and GoAnywhere Agents prior to version 2.2.0 utilize a static IV which allows admin users to brute-…Check if you run itEPSS 0.13%Apr 21, 2026
- High8.7This vulnerability exists in Quantum Networks router due to missing rate limiting and CAPTCHA protection for failed login attempts in the web-based management interface.Check if you run itEPSS 0.32%Apr 21, 2026
- Medium4.4The Website LLMs.txt plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 8.2.6 due to insufficie…Check if you run itEPSS 0.24%Apr 21, 2026
- Medium6.1The Website LLMs.txt plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab' parameter in all versions up to, and including, 8.2.6.Check if you run itEPSS 0.29%Apr 21, 2026
- High8.1FreeScout is a free self-hosted help desk and shared mailbox.Check if you run itEPSS 0.43%Apr 21, 2026
- Medium5.7** UNSUPPORTED WHEN ASSIGNED ** An improper encoding or escaping vulnerability in the CGI program of Zyxel WRE6505 v2 firmware version V1.00(ABDV.3)C0 could allow an a…Check if you run itEPSS 0.22%Apr 21, 2026
- Low2.0OpenBao is an open source identity-based secrets management system.Check if you run itEPSS 0.36%Apr 21, 2026
- High8.8Neko is a a self-hosted virtual browser that runs in Docker and uses WebRTC In versions 3.0.0 through 3.0.10 and 3.1.0 through 3.1.1, any authenticated user can immedi…Check if you run itEPSS 0.64%Apr 21, 2026
- Medium4.7The wpDataTables – WordPress Data Table, Dynamic Tables & Table Charts Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to,…Check if you run itEPSS 0.24%Apr 20, 2026
- Medium5.5Nginx UI is a web user interface for the Nginx web server.Check if you run itEPSS 0.22%Apr 20, 2026
- High8.6Nginx UI is a web user interface for the Nginx web server.Check if you run itEPSS 0.39%Apr 20, 2026
- Medium4.5A vulnerability in the SQL Box in the admin interface of OTRS leads to an uncontrolled resource consumption leading to a DoS against the webserver.Check if you run itEPSS 0.34%Apr 20, 2026
- Medium6.4GFI HelpDesk before 4.99.9 contains a stored cross-site scripting vulnerability in the ticket subject field that allows authenticated staff members to inject malicious…Check if you run itEPSS 0.15%Apr 20, 2026
- Medium4.8GFI HelpDesk before 4.99.9 contains a stored cross-site scripting vulnerability in the language management functionality where the charset POST parameter is passed dir…Check if you run itEPSS 0.15%Apr 20, 2026
- Medium4.8GFI HelpDesk before 4.99.9 contains a stored cross-site scripting vulnerability in the template group creation and editing functionality that allows authenticated admi…Check if you run itEPSS 0.15%Apr 20, 2026
- Critical9.9Improper access control in Doorman v0.1.0 and v1.0.2 allows any authenticated user to update their own account role to a non-admin privileged role via /platform/user/{username}.Check if you run itEPSS 0.41%Apr 20, 2026
- Medium4.9Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high lev…Check if you run itEPSS 0.65%Apr 20, 2026
- Medium5.1Vvveb prior to 1.0.8.1 contains a stored cross-site scripting vulnerability that allows authenticated users with media upload and rename permissions to execute arbitra…Check if you run itEPSS 0.48%Apr 20, 2026
- High8.7Vvveb prior to 1.0.8.1 contains a privilege escalation vulnerability in the admin user profile save endpoint that allows authenticated users to modify privileged field…Check if you run itEPSS 0.96%Apr 20, 2026
- Medium5.8Vexa is an open-source, self-hostable meeting bot API and meeting transcription API.Check if you run itEPSS 0.34%Apr 20, 2026
- Critical9.8OpenAEV is an open source platform allowing organizations to plan, schedule and conduct cyber adversary simulation campaign and tests.Check if you run itEPSS 0.90%Apr 20, 2026
- Medium5.7An improper access control vulnerability in the canonical-livepatch snap client prior to version 10.15.0 allows a local unprivileged user to obtain a sensitive, root-l…Check if you run itEPSS 0.17%Apr 20, 2026
- High7.2OS Command Injection Remote Code Execution Vulnerability in UI in Progress ADC Products allows an authenticated attacker with “All” permissions to execute arbitrary co…Check if you run itEPSS 2.98%Apr 20, 2026