Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.1Jizhicms v2.5.4 is vulnerable to Server-Side Request Forgery (SSRF) in User Evaluation, Message, and Comment modules.Check if you run itEPSS 0.27%Apr 9, 2026
- High7.0Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()Check if you run itEPSS 0.20%Apr 9, 2026
- High7.5HashiCorp’s go-getter library up to v1.8.5 may allow arbitrary file reads on the file system during certain git operations through a maliciously crafted URL.Check if you run itEPSS 0.58%Apr 9, 2026
- Medium6.1A cross-site scripting (XSS) vulnerability in rrweb-snapshot before v2.0.0-alpha.18 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.Check if you run itEPSS 0.24%Apr 9, 2026
- Medium6.4The List category posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'catlist' shortcode in all versions up to, and including, 0.…Check if you run itEPSS 0.27%Apr 9, 2026
- Medium5.3The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to price manipulation via the 'tips' parameter in all versions up to,…Check if you run itEPSS 0.45%Apr 9, 2026
- High7.5Apache Tomcat Missing Encryption of Sensitive Data VulnerabilityPatch nowKEVEPSS 98.50%Apr 9, 2026
- Medium6.5Mattermost Plugins versions <=2.1.3.0 fail to limit the request body size on the {{/changes}} webhook endpoint which allows an authenticated attacker to cause memory e…Check if you run itEPSS 0.31%Apr 9, 2026
- Medium6.5Mattermost Plugins versions <=2.3.1 fail to limit the request body size on the {{/lifecycle}} webhook endpoint which allows an authenticated attacker to cause memory e…Check if you run itEPSS 0.31%Apr 9, 2026
- High7.2An authenticated remote attacker with high privileges can exploit the OpenVPN configuration via the web-based management interface of a WAGO PLC.Check if you run itEPSS 0.73%Apr 9, 2026
- Critical9.1When user logged out, the JWT token the user had authtenticated with was not invalidated, which could lead to reuse of that token in case it was intercepted.Check if you run itEPSS 0.67%Apr 9, 2026
- Medium6.9AlanWeb SCADA saves sensitive information into a log file.Check if you run itEPSS 0.26%Apr 9, 2026
- Medium6.5Apache Airflow versions 3.0.0 through 3.1.8 DagRun wait endpoint returns XCom result values even to users who only have DAG Run read permissions, such as the Viewer ro…Check if you run itEPSS 0.69%Apr 9, 2026
- High8.7AlanWeb SCADA is vulnerable to SQL Injection across most scripts and input parameters.Check if you run itEPSS 0.29%Apr 9, 2026
- High8.8AlanWeb SCADA does not enforce authorization for some directories.Check if you run itEPSS 0.29%Apr 9, 2026
- Critical9.1In Canonical LXD versions 4.12 through 6.7, the doCertificateUpdate function in lxd/certificates.go does not validate the Type field when handling PUT/PATCH requests t…Check if you run itEPSS 0.27%Apr 9, 2026
- Critical9.1In Canonical LXD before 6.8, the backup import path validates project restrictions against backup/index.yaml in the supplied tar archive but creates the instance from…Check if you run itEPSS 0.42%Apr 9, 2026
- Critical9.1Canonical LXD versions 4.12 through 6.7 contain an incomplete denylist in isVMLowLevelOptionForbidden (lxd/project/limits/permissions.go), which omits raw.apparmor and…Check if you run itEPSS 0.36%Apr 9, 2026
- High7.5An Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Apache DolphinScheduler.Check if you run itEPSS 0.52%Apr 9, 2026
- High8.9A vulnerability was detected in Totolink A7100RU 7.4cu.2313_b20191024.Check this weekEPSS 16.61%Apr 9, 2026
- High8.9A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024.Check this weekEPSS 13.51%Apr 9, 2026
- High8.9A weakness has been identified in Totolink A7100RU 7.4cu.2313_b20191024.Check this weekEPSS 13.51%Apr 9, 2026
- High8.9A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024.Check this weekEPSS 13.37%Apr 9, 2026
- High8.9A vulnerability was identified in Totolink A7100RU 7.4cu.2313_b20191024.Check this weekEPSS 15.10%Apr 9, 2026
- Medium5.5A vulnerability was determined in Tenda i12 1.0.0.11(3862).Check if you run itEPSS 0.63%Apr 9, 2026
Sort