Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low3.5Admidio is an open-source user management solution.Check if you run itEPSS 0.15%Mar 31, 2026
- Medium4.6Admidio is an open-source user management solution.Check if you run itEPSS 0.14%Mar 31, 2026
- High7.5Admidio is an open-source user management solution.Check if you run itEPSS 0.52%Mar 31, 2026
- Medium5.3Sulu is an open-source PHP content management system based on the Symfony framework.Check if you run itEPSS 0.34%Mar 31, 2026
- Medium6.5A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to improper server-side validation.Check if you run itEPSS 0.39%Mar 31, 2026
- Medium5.3Discourse is an open-source discussion platform.Check if you run itEPSS 0.40%Mar 31, 2026
- Medium4.8Pega Platform versions 8.1.0 through 25.1.0 are affected by a Stored Cross-site Scripting vulnerability in a user interface component.Check if you run itEPSS 0.26%Mar 31, 2026
- Critical9.4OpenClaw before 2026.3.28 contains a privilege escalation vulnerability in the /pair approve command path that fails to forward caller scopes into the core approval check.Check if you run itEPSS 0.51%Mar 31, 2026
- Medium5.5A vulnerability was determined in code-projects Student Membership System 1.0.Check if you run itEPSS 0.41%Mar 31, 2026
- Medium5.4The Minify HTML plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1.12.Check if you run itEPSS 0.18%Mar 31, 2026
- Critical9.2OpenClaw versions 2026.3.7 before 2026.3.11 contain an authorization bypass vulnerability where plugin subagent routes execute gateway methods through a synthetic oper…Check if you run itEPSS 0.63%Mar 31, 2026
- Medium4.3When the internal webserver is enabled (default is disabled), an attacker might be able to trick an administrator logged to the dashboard into visiting a malicious web…Check if you run itEPSS 0.16%Mar 31, 2026
- Critical9.3Stored Cross-Site Scripting (XSS) in Teampass versions prior to 3.1.5.16, affecting the password manager's password import functionality at the endpoint 'redacted/inde…Check if you run itEPSS 0.23%Mar 31, 2026
- Critical9.3Blind Cross-Site Scripting (XSS) in Teampass, versions prior to 3.1.5.16, within the password manager login functionality in the 'contraseña' parameter of the login fo…Check if you run itEPSS 0.27%Mar 31, 2026
- Low2.1A vulnerability was identified in TRENDnet TEW-713RE up to 1.02.Check if you run itEPSS 8.51%Mar 31, 2026
- Medium6.1The Auto Post Scheduler plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.84.Check if you run itEPSS 0.20%Mar 31, 2026
- Low2.1A vulnerability has been found in SourceCodester Simple Doctors Appointment System up to 1.0.Check if you run itEPSS 0.35%Mar 31, 2026
- Medium5.5A flaw has been found in SourceCodester Simple Doctors Appointment System 1.0.Check if you run itEPSS 0.41%Mar 31, 2026
- Medium5.5A vulnerability was detected in SourceCodester Simple Doctors Appointment System 1.0.Check if you run itEPSS 0.41%Mar 31, 2026
- Low2.1Multiple cross-site scripting (XSS) vulnerabilities in PaperCut NG/MF before 25.0.10 allow authenticated administrator users to inject arbitrary web script or HTML cod…Check if you run itEPSS 0.23%Mar 31, 2026
- High7.2baserCMS is a website development framework.Check if you run itEPSS 1.08%Mar 31, 2026
- Medium5.3baserCMS is a website development framework.Check if you run itEPSS 0.45%Mar 31, 2026
- High7.2baserCMS is a website development framework.Check if you run itEPSS 2.06%Mar 31, 2026
- High7.2baserCMS is a website development framework.Check if you run itEPSS 2.28%Mar 31, 2026
- Unknownthimpress learnpress Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 0.98%Mar 31, 2026