Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.9A security vulnerability has been detected in Collabora KodExplorer up to 4.52.Check if you run itEPSS 0.32%Apr 19, 2026
- Low2.1A weakness has been identified in kodcloud KodExplorer up to 4.52.Check if you run itEPSS 0.27%Apr 19, 2026
- Low2.0A security flaw has been discovered in kodcloud KodExplorer up to 4.52.Check if you run itEPSS 0.30%Apr 19, 2026
- Medium6.9A vulnerability was identified in kodcloud KodExplorer up to 4.52.Check if you run itEPSS 0.41%Apr 19, 2026
- Medium5.5A vulnerability was determined in kodcloud KodExplorer up to 4.52.Check if you run itEPSS 0.51%Apr 19, 2026
- Low2.1A vulnerability was found in EMQ EMQX Enterprise up to 6.1.0.Check if you run itEPSS 0.33%Apr 19, 2026
- High7.4A vulnerability has been found in H3C Magic B1 up to 100R004.Check if you run itEPSS 0.48%Apr 19, 2026
- Medium5.5A flaw has been found in dameng100 muucmf 1.9.5.20260309.Check if you run itEPSS 0.27%Apr 19, 2026
- Low2.0A vulnerability was detected in EyouCMS up to 1.7.1.Check if you run itEPSS 0.28%Apr 19, 2026
- High7.4A security vulnerability has been detected in H3C Magic B0 up to 100R002.Check if you run itEPSS 0.48%Apr 19, 2026
- Medium5.3A weakness has been identified in Wavlink WL-WN579A3 220323.Check if you run itEPSS 0.27%Apr 19, 2026
- Medium6.4The EMC – Easily Embed Calendly Scheduling Features plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's calendly shortcode in all versio…Check if you run itEPSS 0.19%Apr 19, 2026
- Critical9.4protobufjs compiles protobuf definitions into JavaScript (JS) functions.Check if you run itEPSS 0.77%Apr 18, 2026
- Medium5.4The Keycloak authentication manager in did not generate or validate the OAuth 2.0 parameter on the login / login-callback flow, and did not use PKCE.Check if you run itEPSS 0.40%Apr 18, 2026
- Medium6.4The Contextual Related Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'other_attributes' parameter in versions up to, and including, 4…Check if you run itEPSS 0.30%Apr 18, 2026
- Medium5.4The Categories Images plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.3.1, via the 'z_taxonomy_image' shortcode.Check if you run itEPSS 0.25%Apr 18, 2026
- Medium6.4The Content Blocks (Custom Post Widget) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's content_block shortcode in all versions up t…Check if you run itEPSS 0.19%Apr 18, 2026
- High7.5Little CMS (lcms2) through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication.Check if you run itEPSS 0.36%Apr 18, 2026
- Low3.7Secrets in Variables saved as JSON dictionaries were not properly redacted - in case thee variables were retrieved by the user the secrets stored as nested fields were not masked.Check if you run itEPSS 0.42%Apr 18, 2026
- High7.5UI / API User with asset materialize permission could trigger dags they had no access to.Check if you run itEPSS 0.43%Apr 18, 2026
- High7.5In case of SQL errors, exception/stack trace of errors was exposed in API even if "api/expose_stack_traces" was set to false.Check if you run itEPSS 0.45%Apr 18, 2026
- High8.8An example of BashOperator in Airflow documentation suggested a way of passing dag_run.conf in the way that could cause unsanitized user input to be used to escalate p…Check if you run itEPSS 0.77%Apr 18, 2026
- High7.2Dag Authors, who normally should not be able to execute code in the webserver context could craft XCom payload causing the webserver to execute arbitrary code.Check if you run itEPSS 0.82%Apr 18, 2026
- High7.8In iTerm2 through 3.6.9, displaying a .txt file can cause code execution via DCS 2000p and OSC 135 data, if the working directory contains a malicious file whose name…Check if you run itEPSS 0.20%Apr 18, 2026
- High8.8The CMP – Coming Soon & Maintenance Plugin by NiteoThemes plugin for WordPress is vulnerable to arbitrary file upload and remote code execution in all versions up to,…Check if you run itEPSS 0.87%Apr 18, 2026
Sort