Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.1Multiple cross-site scripting (XSS) vulnerabilities in PaperCut NG/MF before 25.0.10 allow authenticated administrator users to inject arbitrary web script or HTML cod…Check if you run itEPSS 0.23%Mar 31, 2026
- High7.2baserCMS is a website development framework.Check if you run itEPSS 1.08%Mar 31, 2026
- Medium5.3baserCMS is a website development framework.Check if you run itEPSS 0.45%Mar 31, 2026
- High7.2baserCMS is a website development framework.Check if you run itEPSS 2.06%Mar 31, 2026
- High7.2baserCMS is a website development framework.Check if you run itEPSS 2.28%Mar 31, 2026
- Unknownthimpress learnpress Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 0.98%Mar 31, 2026
- High8.8The Debugger & Troubleshooter plugin for WordPress was vulnerable to Unauthenticated Privilege Escalation in versions up to and including 1.3.2.Check if you run itEPSS 0.61%Mar 30, 2026
- Critical9.0CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Check if you run itEPSS 0.38%Mar 30, 2026
- Critical9.0CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Check if you run itEPSS 0.38%Mar 30, 2026
- Low2.0A weakness has been identified in YunaiV yudao-cloud up to 2026.01.Check if you run itEPSS 0.33%Mar 30, 2026
- Medium4.9Tautulli is a Python based monitoring and tracking tool for Plex Media Server.Check if you run itEPSS 0.43%Mar 30, 2026
- Medium5.5A security flaw has been discovered in YunaiV yudao-cloud up to 2026.01.Check if you run itEPSS 0.41%Mar 30, 2026
- High7.6Grav CMS v1.7.x and before is vulnerable to XML External Entity (XXE) through the SVG file upload functionality in the admin panel and File Manager plugin.Check if you run itEPSS 0.35%Mar 30, 2026
- Medium6.8OpenSC is an open source smart card tools and middleware.Check if you run itEPSS 0.16%Mar 30, 2026
- Medium6.8OpenSC is an open source smart card tools and middleware.Check if you run itEPSS 0.13%Mar 30, 2026
- Medium5.3MRCMS V3.1.2 contains an unauthenticated directory enumeration vulnerability in the file management module.Check if you run itEPSS 0.50%Mar 30, 2026
- High7.1Unauthenticated credential disclosure in the wizard interface in ZTE ZXHN H188A V6.0.10P2_TE and V6.0.10P3N3_TE allows unauthenticated attackers on the local network t…Check if you run itEPSS 2.27%Mar 30, 2026
- Medium6.5DDSN Interactive cm3 Acora CMS version 10.7.1 contains an improper access control vulnerability.Check if you run itEPSS 0.41%Mar 30, 2026
- High7.1A Cross-Site Request Forgery (CSRF) vulnerability in the WatchGuard Fireware OS WebUI could allow a remote attacker to trigger a denial-of-service (DoS) condition in t…Check if you run itEPSS 0.24%Mar 30, 2026
- Low1.9A flaw has been found in code-projects Exam Form Submission 1.0.Check if you run itEPSS 0.34%Mar 30, 2026
- High8.6XenForo before 2.3.9 and before 2.2.18 allows remote code execution (RCE) by authenticated, but malicious, admin users.Patch nowKEVEPSS 0.90%Mar 30, 2026
- Critical9.3OpenClaw before 2026.3.13 allows bootstrap setup codes to be replayed during device pairing verification in src/infra/device-bootstrap.ts.Check if you run itEPSS 0.61%Mar 29, 2026
- High7.1OpenClaw before 2026.3.11 contains an authorization bypass vulnerability allowing authenticated operators with only operator.write permission to access admin-only brow…Check if you run itEPSS 0.40%Mar 29, 2026
- Critical9.4OpenClaw before 2026.3.11 contains a privilege escalation vulnerability in device.token.rotate that allows callers with operator.pairing scope to mint tokens with broa…Check if you run itEPSS 0.69%Mar 29, 2026
- Medium6.9OpenClaw before 2026.3.11 contains an authorization bypass vulnerability allowing write-scoped callers to reach admin-only session reset logic.Check if you run itEPSS 0.14%Mar 29, 2026