Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4The Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including,…Check if you run itEPSS 0.17%Apr 23, 2026
- Critical10.0Paperclip is a Node.js server and React UI that orchestrates a team of AI agents to run a business.Patch nowKEVEPSS 31.67%Apr 23, 2026
- Medium6.9OpenLearn is open-source educational forum software.Check if you run itEPSS 0.18%Apr 23, 2026
- High8.4Vite+ is a unified toolchain and entry point for web development.Check if you run itEPSS 0.31%Apr 23, 2026
- High8.8Paperclip is a Node.js server and React UI that orchestrates a team of AI agents to run a business.Check if you run itEPSS 0.59%Apr 23, 2026
- Medium6.9PySpector is a static analysis security testing (SAST) Framework engineered for modern Python development workflows.Check if you run itEPSS 0.18%Apr 23, 2026
- High8.5STIG Manager is an API and web client for managing Security Technical Implementation Guides (STIG) assessments of Information Systems.Check if you run itEPSS 0.38%Apr 23, 2026
- Critical9.3Noir is a Domain Specific Language for SNARK proving systems that is designed to use any ACIR compatible proving system, and Brillig is the bytecode ACIR uses for non-determinism.Check if you run itEPSS 0.40%Apr 23, 2026
- Critical9.0Luanti (formerly Minetest) is an open source voxel game-creation platform.Check if you run itEPSS 0.37%Apr 23, 2026
- Medium5.3LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform.Check if you run itEPSS 0.21%Apr 23, 2026
- High7.5PsiTransfer is an open source, self-hosted file sharing solution.Check if you run itEPSS 0.39%Apr 23, 2026
- Medium6.4The Social Rocket – Social Sharing Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including…Check if you run itEPSS 0.19%Apr 23, 2026
- Low2.9A vulnerability was identified in ByteDance verl up to 0.7.0.Check if you run itEPSS 0.33%Apr 23, 2026
- Low2.1A vulnerability was determined in ericc-ch copilot-api up to 0.7.0.Check if you run itEPSS 0.26%Apr 23, 2026
- Critical9.8IBM Total Storage Service Console (TSSC) / TS4500 IMC 9.2, 9.3, 9.4, 9.5, 9.6 TSSC/IMC could allow an unauthenticated user to execute arbitrary commands with normal us…Check if you run itEPSS 0.34%Apr 23, 2026
- Medium6.5IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.…Check if you run itEPSS 0.18%Apr 23, 2026
- Medium4.8IBM Guardium Data Protection 12.1 is vulnerable to cross-site scripting.Check if you run itEPSS 0.18%Apr 23, 2026
- Medium4.8IBM Guardium Data Protection 12.1 is vulnerable to stored cross-site scripting.Check if you run itEPSS 0.14%Apr 23, 2026
- Medium4.9IBM Guardium Data Protection 12.1 could allow an administrative user to traverse directories on the system.Check if you run itEPSS 0.36%Apr 23, 2026
- Critical9.2Rclone is a command-line program to sync files and directories to and from different cloud storage providers.Check if you run itEPSS 8.58%Apr 23, 2026
- Critical9.2Rclone is a command-line program to sync files and directories to and from different cloud storage providers.Patch nowKEVEPSS 32.71%Apr 23, 2026
- High8.7A path Traversal vulnerability exists in Ziostation2 v2.9.8.7 and earlier.Check if you run itEPSS 0.62%Apr 23, 2026
- Medium5.9IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.4 IBM WebSphere Application Server Liberty is vulnerable to identity spoofing under limited conditio…Check if you run itEPSS 0.28%Apr 23, 2026
- High8.4The installers of LiveOn Meet Client for Windows (Downloader5Installer.exe and Downloader5InstallerForAdmin.exe) and the installers of Canon Network Camera Plugin (Can…Check if you run itEPSS 0.16%Apr 23, 2026
- Critical9.8In Rocket.Chat <8.3.0, <8.2.1, <8.1.2, <8.0.3, <7.13.5, <7.12.6, <7.11.6, and <7.10.9, a NoSQL injection vulnerability can lead to account takeover of the first user w…Check if you run itEPSS 0.42%Apr 23, 2026
Sort