Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3The addfreespace plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.1.3.Check if you run itEPSS 0.24%May 5, 2026
- Medium4.3The DX Sources plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.1.Check if you run itEPSS 0.19%May 5, 2026
- Critical9.0Nginx UI is a web user interface for the Nginx web server.Check if you run itEPSS 0.83%May 4, 2026
- Critical9.8Nginx UI is a web user interface for the Nginx web server.Check if you run itEPSS 1.60%May 4, 2026
- Medium6.5Nginx UI is a web user interface for the Nginx web server.Check if you run itEPSS 0.40%May 4, 2026
- High7.5@fastify/accepts-serializer cached serializer-selection results keyed by the request Accept header without a size limit or eviction policy.Check if you run itEPSS 0.49%May 4, 2026
- High8.3WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains a stack-based buffer overflow vulnerability in the firewall.cgi and makeRequest.cgi binaries that allow…Check if you run itEPSS 0.57%May 4, 2026
- Critical9.3WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the firewall.cgi binary across five request handlers that appl…Check if you run itEPSS 1.90%May 4, 2026
- Critical9.3WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the adm.cgi binary's reboot_time function that allows unauthen…Check if you run itEPSS 4.10%May 4, 2026
- Critical9.3WDR201A WiFi Extender (HW V2.1, FW LFMZX28040922V1.02) contains an OS command injection vulnerability in the makeRequest.cgi binary that allows unauthenticated remote…Check if you run itEPSS 3.28%May 4, 2026
- High8.1IKUS Rdiffweb before 2.10.5 has an improper authorization flaw that allows an attacker with any valid or stolen access token to act as other users.Check if you run itEPSS 0.24%May 4, 2026
- High8.7n8n is an open source workflow automation platform.Check if you run itEPSS 0.65%May 4, 2026
- Critical9.4n8n is an open source workflow automation platform.Check if you run itEPSS 0.76%May 4, 2026
- High7.1n8n is an open source workflow automation platform.Check if you run itEPSS 0.42%May 4, 2026
- High7.5Prometheus is an open-source monitoring system and time series database.Check if you run itEPSS 0.81%May 4, 2026
- Medium4.4PlantUML Macro is a macro for rendering UML diagrams from simple textual schemes.Check if you run itEPSS 0.27%May 4, 2026
- Critical9.4In plain terms, Apache Polaris is supposed to issue short-lived GCS credentials that only work for one table's files, but a crafted namespace or table name can cause t…Check if you run itEPSS 0.72%May 4, 2026
- Critical9.4Apache Polaris can issue broad temporary ("vended") storage credentials during staged table creation before the effective table location has been validated or durably reserved.Check if you run itEPSS 0.58%May 4, 2026
- Critical9.1XML External Entity (XXE) via Unsanitized Dictionary Parsing in Apache OpenNLP DictionaryEntryPersistor Versions Affected: before 2.5.9, before 3.0.0-M3 Description: T…Check if you run itEPSS 0.84%May 4, 2026
- High7.5A NULL pointer dereference in mod_dav_lock in Apache HTTP Server 2.4.66 and earlier may allow an attacker to crash the server with a malicious request.mod_dav_lock is…Check if you run itEPSS 1.57%May 4, 2026
- High7.4A vulnerability was detected in Totolink N300RH 3.2.4-B20220812.Check if you run itEPSS 0.79%May 4, 2026
- High7.4A security vulnerability has been detected in Totolink N300RH 3.2.4-B20220812.Check if you run itEPSS 0.79%May 4, 2026
- High7.4A weakness has been identified in Totolink N300RH 3.2.4-B20220812.Check if you run itEPSS 0.79%May 4, 2026
- Low2.1A vulnerability was detected in code-projects BloodBank Managing System 1.0.Check if you run itEPSS 0.35%May 4, 2026
- Low2.1A security flaw has been discovered in pixelsock directus-mcp 1.0.0.Check if you run itEPSS 0.37%May 4, 2026