Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2Serendipity is a PHP-powered weblog engine.Check if you run itEPSS 0.26%Apr 15, 2026
- Medium6.9Serendipity is a PHP-powered weblog engine.Check if you run itEPSS 0.22%Apr 15, 2026
- High8.1mcp-server-kubernetes is a Model Context Protocol server for Kubernetes cluster management.Check if you run itEPSS 0.26%Apr 15, 2026
- Critical9.9OpenRemote is an open-source IoT platform.Check if you run itEPSS 0.92%Apr 15, 2026
- High7.5Impact: Fastify applications using schema.body.content for per-content-type body validation can have validation bypassed entirely by prepending a space to the Content-Type header.Check if you run itEPSS 0.45%Apr 15, 2026
- High7.2The Age Verification & Identity Verification by Token of Trust plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘description’ parameter in all…Check if you run itEPSS 0.34%Apr 15, 2026
- Medium4.4The List View Google Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the event description in all versions up to, and including, 7.4.3 d…Check if you run itEPSS 0.22%Apr 15, 2026
- Critical9.8The WebStack theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the io_img_upload() function in all versions up to, and…Check if you run itEPSS 0.98%Apr 15, 2026
- Medium4.3The Avada (Fusion) Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.15.1.Check if you run itEPSS 0.28%Apr 15, 2026
- Medium5.4The Avada (Fusion) Builder plugin for WordPress is vulnerable to Arbitrary WordPress Action Execution in all versions up to, and including, 3.15.1.Check if you run itEPSS 0.31%Apr 15, 2026
- Medium5.3The 3D FlipBook – PDF Embedder, PDF Flipbook Viewer, Flipbook Image Gallery plugin for WordPress is vulnerable to unauthorized access of data due to a missing capabili…Check if you run itEPSS 0.89%Apr 15, 2026
- High8.1The example example_xcom that was included in airflow documentation implemented unsafe pattern of reading value from xcom in the way that could be exploited to allow U…Check if you run itEPSS 0.58%Apr 15, 2026
- Medium6.5The Eleganzo theme for WordPress is vulnerable to arbitrary directory deletion due to insufficient path validation in the akd_required_plugin_callback function in all…Check if you run itEPSS 0.34%Apr 15, 2026
- High7.2An out-of-bounds write vulnerability [CWE-787] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11 may…Check if you run itEPSS 6.44%Apr 14, 2026
- Critical9.6NuGet Gallery is a package repository that powers nuget.org.Check if you run itEPSS 0.53%Apr 14, 2026
- High7.2BoidCMS is an open-source, PHP-based flat-file CMS for building simple websites and blogs, using JSON as its database.Check if you run itEPSS 0.73%Apr 14, 2026
- Critical9.3nanobot is a personal AI assistant.Check if you run itEPSS 0.16%Apr 14, 2026
- Medium6.5Jellyfin is an open source self hosted media server.Check if you run itEPSS 0.26%Apr 14, 2026
- Critical9.3Jellyfin is an open source self hosted media server.Check if you run itEPSS 0.32%Apr 14, 2026
- High8.6Jellyfin is an open source self hosted media server.Check if you run itEPSS 0.31%Apr 14, 2026
- High8.8Jellyfin is an open source self hosted media server.Check if you run itEPSS 0.75%Apr 14, 2026
- Critical9.1OAuth2 Proxy is a reverse proxy that provides authentication using OAuth2 providers.Check if you run itEPSS 0.47%Apr 14, 2026
- Low3.5OAuth2 Proxy is a reverse proxy that provides authentication using OAuth2 providers.Check if you run itEPSS 0.18%Apr 14, 2026
- Medium4.0Podman is a tool for managing OCI containers and pods.Check if you run itEPSS 0.61%Apr 14, 2026
- High7.8libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel.Check if you run itEPSS 0.29%Apr 14, 2026
Sort