Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8An issue in ralphje Signify before v.0.9.2 allows a remote attacker to escalate privileges via the signed_data.py and the context.py componentsCheck if you run itEPSS 0.35%Mar 25, 2026
- High8.7n8n is an open source workflow automation platform.Check if you run itEPSS 0.43%Mar 25, 2026
- Critical9.4n8n is an open source workflow automation platform.Check if you run itEPSS 0.80%Mar 25, 2026
- High8.8n8n is an open source workflow automation platform.Check if you run itEPSS 0.33%Mar 25, 2026
- High8.5n8n is an open source workflow automation platform.Check if you run itEPSS 0.40%Mar 25, 2026
- Critical9.4n8n is an open source workflow automation platform.Check if you run itEPSS 0.97%Mar 25, 2026
- High8.7Multiple Stored XSS vulnerabilities exist in Seafile Server version 13.0.15,13.0.16-pro,12.0.14 and prior and fixed in 13.0.17, 13.0.17-pro, and 12.0.20-pro, via the S…Check if you run itEPSS 0.29%Mar 25, 2026
- High7.1n8n is an open source workflow automation platform.Check if you run itEPSS 0.27%Mar 25, 2026
- High8.8Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642.Check if you run itEPSS 0.69%Mar 25, 2026
- High7.8fontconfig before 2.17.1 has an off-by-one error in allocation during sfnt capability handling, leading to a one-byte out-of-bounds write, and potentially a crash or c…Check if you run itEPSS 0.13%Mar 25, 2026
- Critical9.1Improper Control of Generation of Code ('Code Injection') vulnerability in Nelio Software Nelio AB Testing nelio-ab-testing allows Code Injection.This issue affects Ne…Check if you run itEPSS 0.30%Mar 25, 2026
- Medium6.8Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in icopydoc YML for Yandex Market yml-for-yandex-market allows Path Traver…Check if you run itEPSS 0.34%Mar 25, 2026
- High7.5Missing Authorization vulnerability in StellarWP Restrict Content restrict-content allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a…Check if you run itEPSS 0.23%Mar 25, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Taboola Taboola Pixel taboola-pixel allows Reflected XSS.This iss…Check if you run itEPSS 0.15%Mar 25, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OOPSpam Team OOPSpam Anti-Spam oopspam-anti-spam allows Stored XS…Check if you run itEPSS 0.15%Mar 25, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeFusion Fusion Builder fusion-builder allows Reflected XSS.Th…Check if you run itEPSS 0.15%Mar 25, 2026
- Medium6.5Missing Authorization vulnerability in Premmerce Premmerce Redirect Manager premmerce-redirect-manager allows Exploiting Incorrectly Configured Access Control Security…Check if you run itEPSS 0.18%Mar 25, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bookly Bookly bookly-responsive-appointment-booking-tool allows R…Check if you run itEPSS 0.15%Mar 25, 2026
- Critical9.3Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PublishPress PublishPress Revisions revisionary allows Blind SQL…Check if you run itEPSS 0.25%Mar 25, 2026
- High7.5Insertion of Sensitive Information Into Sent Data vulnerability in Noor Alam SMTP Mailer smtp-mailer allows Retrieve Embedded Sensitive Data.This issue affects SMTP Ma…Check if you run itEPSS 0.25%Mar 25, 2026
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in nK Visual Portfolio, Photo Gallery & Post Grid…Check if you run itEPSS 0.31%Mar 25, 2026
- Critical9.9Unrestricted Upload of File with Dangerous Type vulnerability in halfdata Green Downloads halfdata-paypal-green-downloads allows Using Malicious Files.This issue affec…Check if you run itEPSS 0.27%Mar 25, 2026
- Medium6.5Authorization Bypass Through User-Controlled Key vulnerability in JoomSky JS Help Desk js-support-ticket allows Exploiting Incorrectly Configured Access Control Securi…Check if you run itEPSS 0.16%Mar 25, 2026
- High8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JoomSky JS Help Desk js-support-ticket allows Blind SQL Injection…Check if you run itEPSS 0.22%Mar 25, 2026
- Medium6.5Authorization Bypass Through User-Controlled Key vulnerability in LatePoint LatePoint latepoint allows Exploiting Incorrectly Configured Access Control Security Levels…Check if you run itEPSS 0.18%Mar 25, 2026
Sort