Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1RealtyScript 4.0.2 Cross-Site Scripting via Multiple ParametersCheck if you run itEPSS 0.29%Mar 15, 2026
- Medium6.9RealtyScript 4.0.2 Multiple Cross-Site Request Forgery and Persistent Cross-Site Scripting VulnerabilitiesCheck if you run itEPSS 0.19%Mar 15, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BoldGrid Sprout Clients sprout-clients allows Stored XSS.This iss…Check if you run itEPSS 0.23%Mar 13, 2026
- High7.2Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in BoldGrid Client Invoicing by Sprout Invoices s…Check if you run itEPSS 0.59%Mar 13, 2026
- High7.6OneUptime is a solution for monitoring and managing online services.Check if you run itEPSS 0.31%Mar 13, 2026
- Critical9.9OneUptime is a solution for monitoring and managing online services.Check if you run itEPSS 0.66%Mar 13, 2026
- Medium5.0JumpServer is an open source bastion host and an operation and maintenance security audit system.Check if you run itEPSS 0.13%Mar 13, 2026
- High7.5The Formidable Forms plugin for WordPress is vulnerable to a payment integrity bypass in all versions up to, and including, 6.28.Check if you run itEPSS 0.53%Mar 13, 2026
- Medium6.5Issue summary: An OpenSSL TLS 1.3 server may fail to negotiate the expected preferred key exchange group when its key exchange group configuration includes the default…Check if you run itEPSS 0.51%Mar 13, 2026
- High8.2FreeRDP is a free implementation of the Remote Desktop Protocol.Check if you run itEPSS 0.32%Mar 13, 2026
- High8.2FreeRDP is a free implementation of the Remote Desktop Protocol.Check if you run itEPSS 0.51%Mar 13, 2026
- Medium6.9wpDiscuz before 7.6.47 contains an information disclosure vulnerability that allows administrators to inadvertently expose OAuth secrets by exporting plugin options as JSON.Check if you run itEPSS 0.29%Mar 13, 2026
- Medium6.9wpDiscuz before 7.6.47 contains an IP spoofing vulnerability in the getIP() function that allows attackers to bypass IP-based rate limiting and ban enforcement by trus…Check if you run itEPSS 0.16%Mar 13, 2026
- High8.8Voltronic Power SNMP Web Pro version 1.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to access privileged management function…Check if you run itEPSS 0.28%Mar 13, 2026
- High7.5undici: Undici: Denial of Service via invalid WebSocket permessage-deflate extension parameterCheck if you run itEPSS 0.89%Mar 12, 2026
- Medium4.6ImpactWhen an application passes user-controlled input to the upgrade option of client.request(), an attacker can inject CRLF sequences (\r\n) to: * Inject arbitrary H…Check if you run itEPSS 0.28%Mar 12, 2026
- High7.5The undici WebSocket client is vulnerable to a denial-of-service attack via unbounded memory consumption during permessage-deflate decompression.Check if you run itEPSS 1.17%Mar 12, 2026
- Critical9.8Undici allows duplicate HTTP Content-Length headers when they are provided in an array with case-variant names (e.g., Content-Length and content-length).Check if you run itEPSS 0.51%Mar 12, 2026
- High8.1Graphiti is a framework for building and querying temporal context graphs for AI agents.Check if you run itEPSS 0.50%Mar 12, 2026
- Medium6.5Tinyauth is an authentication and authorization server.Check if you run itEPSS 0.35%Mar 12, 2026
- Low1.7Backstage is an open framework for building developer portals.Check if you run itEPSS 0.49%Mar 12, 2026
- Medium4.7Backstage is an open framework for building developer portals.Check if you run itEPSS 0.24%Mar 12, 2026
- High8.5A command injection vulnerability has been identified in the Telnet command-line interface (CLI) of TP-Link TL-MR6400 v5.3.Check if you run itEPSS 2.88%Mar 12, 2026
- Medium6.2Tina is a headless content management system.Check if you run itEPSS 0.56%Mar 12, 2026
- High8.4Tina is a headless content management system.Check if you run itEPSS 0.22%Mar 12, 2026