Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.1A vulnerability has been found in itsourcecode College Management System 1.0.Check if you run itEPSS 0.32%Mar 25, 2026
- High8.7Injection vulnerabilities due to validation/sanitisation of user-supplied input in ActiveMatrix BusinessWorks and Enterprise Administrator allows information disclosur…Check if you run itEPSS 0.38%Mar 24, 2026
- High8.8pyLoad is a free and open-source download manager written in Python.Check if you run itEPSS 0.58%Mar 24, 2026
- High8.1FileRise is a self-hosted web file manager / WebDAV server.Check if you run itEPSS 0.61%Mar 24, 2026
- Critical9.2MinIO is a high-performance object storage system.Check if you run itEPSS 0.61%Mar 24, 2026
- Critical9.1Astro is a web framework.Check if you run itEPSS 0.50%Mar 24, 2026
- High8.6Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.67%Mar 24, 2026
- High8.6Froxlor is open source server administration software.Check if you run itEPSS 0.68%Mar 24, 2026
- High8.7A low privilege Zabbix user with API access can exploit a blind SQL injection vulnerability in include/classes/api/CApiService.php to execute arbitrary SQL selects via…Check if you run itEPSS 3.94%Mar 24, 2026
- High7.7Host and event action script input is validated with a regex (set by the administrator), but the validation runs in multiline mode.Check if you run itEPSS 0.30%Mar 24, 2026
- High7.1For performance reasons Zabbix Server/Proxy reuses JavaScript (Duktape) contexts (used in script items, JavaScript reprocessing, Webhooks).Check if you run itEPSS 0.24%Mar 24, 2026
- Medium6.9Vikunja is an open-source self-hosted task management platform.Check if you run itEPSS 0.34%Mar 24, 2026
- Medium6.5Vikunja is an open-source self-hosted task management platform.Check if you run itEPSS 0.46%Mar 24, 2026
- High8.1Vikunja is an open-source self-hosted task management platform.Check if you run itEPSS 0.44%Mar 24, 2026
- High7.3Exposure of session signing secret in Checkmk <2.4.0p23, <2.3.0p45 and 2.2.0 allows an administrator of a remote site with config sync enabled to hijack sessions on th…Check if you run itEPSS 0.33%Mar 24, 2026
- High8.7Vitals ESP developed by Galaxy Software Services has a Incorrect Authorization vulnerability, allowing authenticated remote attackers to perform certain administrative…Check if you run itEPSS 0.53%Mar 24, 2026
- Critical9.1The WP DSGVO Tools (GDPR) plugin for WordPress is vulnerable to unauthorized account destruction in all versions up to, and including, 3.1.38.Check if you run itEPSS 0.72%Mar 24, 2026
- Medium5.5A flaw has been found in SourceCodester Online Admission System 1.0.Check if you run itEPSS 0.41%Mar 24, 2026
- Low2.1A vulnerability was determined in itsourcecode sanitize or validate this input 1.0.Check if you run itEPSS 0.32%Mar 24, 2026
- Medium5.4The User Registration & Membership plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the Content Access Rule…Check if you run itEPSS 0.30%Mar 24, 2026
- High8.1The Contest Gallery plugin for WordPress is vulnerable to an authentication bypass leading to admin account takeover in all versions up to, and including, 28.1.5.Check if you run itEPSS 0.73%Mar 24, 2026
- High7.5Salvo is a Rust web framework.Check if you run itEPSS 0.55%Mar 24, 2026
- Medium5.5A vulnerability has been found in itsourcecode Free Hotel Reservation System 1.0.Check if you run itEPSS 0.41%Mar 23, 2026
- Medium6.0Blinko is an AI-powered card note-taking project.Check if you run itEPSS 0.22%Mar 23, 2026
- Medium5.3Blinko is an AI-powered card note-taking project.Check if you run itEPSS 0.34%Mar 23, 2026