Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.63%Mar 18, 2026
- High8.2Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.74%Mar 18, 2026
- High7.5Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.74%Mar 18, 2026
- High8.8ClipBucket v5 is an open source video sharing platform.Check if you run itEPSS 0.52%Mar 18, 2026
- High8.1Glances is an open-source system cross-platform monitoring tool.Check if you run itEPSS 0.24%Mar 18, 2026
- High7.5Jenkins 2.442 through 2.554 (both inclusive), LTS 2.426.3 through LTS 2.541.2 (both inclusive) performs origin validation of requests made through the CLI WebSocket en…Check if you run itEPSS 0.46%Mar 18, 2026
- High8.2The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization on the REST API endpoin…Check if you run itEPSS 0.44%Mar 18, 2026
- High7.3The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 4.1.2.Check if you run itEPSS 0.56%Mar 18, 2026
- High7.8The "Privileged Helper" component of the Arturia Software Center (MacOS) does not perform sufficient client code signature validation when a client connects.Check if you run itEPSS 0.13%Mar 18, 2026
- Medium5.3A stack-based buffer overflow in the device's Telnet/SSH CLI login routine occurs when a unauthenticated attacker send an oversized or unexpected username input.Check if you run itEPSS 0.38%Mar 18, 2026
- Medium6.5A stack-based buffer overflow in the CLI's TFTP file‑transfer command handling allows a low-privileged attacker with Telnet/SSH access to trigger memory corruption by…Check if you run itEPSS 0.33%Mar 18, 2026
- Medium6.1The Writeprint Stylometry plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'p' GET parameter in all versions up to and including 0.1.Check if you run itEPSS 0.35%Mar 18, 2026
- High8.7Glances is an open-source system cross-platform monitoring tool.Check if you run itEPSS 1.75%Mar 18, 2026
- Medium5.8A flaw was identified in Keycloak, an identity and access management solution, where it improperly follows HTTP redirects when processing certain client configuration requests.Check if you run itEPSS 0.41%Mar 18, 2026
- Medium5.3Elysia is a Typescript framework for request validation, type inference, OpenAPI documentation, and client-server communication.Check if you run itEPSS 0.34%Mar 18, 2026
- Medium6.1The [CR]Paid Link Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the URL path in all versions up to, and including, 0.5 due to insuff…Check if you run itEPSS 0.18%Mar 18, 2026
- High8.8OpenClaw versions prior to 2026.2.19 contain a path traversal vulnerability in the Feishu media download flow where untrusted media keys are interpolated directly into…Check if you run itEPSS 0.34%Mar 18, 2026
- Medium6.9Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 0.87%Mar 18, 2026
- Medium6.5GLPI is a free Asset and IT management software package.Check if you run itEPSS 0.40%Mar 18, 2026
- Medium6.7Netskope was notified about a potential gap in its Endpoint DLP Module for Netskope Client on Windows systems.Check if you run itEPSS 0.17%Mar 17, 2026
- High8.1An issue was discovered in SpeedExam Online Examination System (SaaS) after v.FEV2026.Check if you run itEPSS 0.45%Mar 17, 2026
- High8.8GLPI is a free Asset and IT management software package.Check if you run itEPSS 0.47%Mar 17, 2026
- Medium6.8Netskope was notified about a potential gap in its Endpoint DLP Module for Netskope Client on Windows systems.Check if you run itEPSS 0.11%Mar 17, 2026
- Medium6.3The GL-iNet Comet (GL-RM1) KVM connects to a GL-iNet site during boot-up to provision client and CA certificates.Check if you run itEPSS 0.33%Mar 17, 2026
- Low2.7HCL Sametime is vulnerable to broken server-side validation.Check if you run itEPSS 0.20%Mar 17, 2026