Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9Active Support is a toolkit of support libraries and Ruby core extensions extracted from the Rails framework.Check if you run itEPSS 0.66%Mar 24, 2026
- Critical9.8Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')Patch nowKEVEPSS 0.88%Mar 24, 2026
- High7.5The WP Job Portal plugin for WordPress is vulnerable to SQL Injection via the 'radius' parameter in all versions up to, and including, 2.4.8 due to insufficient escapi…Check if you run itEPSS 0.42%Mar 23, 2026
- Medium4.3The Smart Custom Fields plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the relational_posts_search() function i…Check if you run itEPSS 0.30%Mar 23, 2026
- Medium4.3The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to unauthorized deletion of quiz question answers due to a missing capability check in the del…Check if you run itEPSS 0.27%Mar 23, 2026
- Low2.3Action View provides conventions and helpers for building web pages with the Rails framework.Check if you run itEPSS 0.68%Mar 23, 2026
- Low1.3Action Pack is a Rubygem for building web applications on the Rails framework.Check if you run itEPSS 0.26%Mar 23, 2026
- High7.7Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask.Check if you run itEPSS 0.80%Mar 23, 2026
- Medium6.5The Quiz and Survey Master (QSM) plugin for WordPress is vulnerable to SQL Injection via the 'merged_question' parameter in all versions up to, and including, 10.3.5.Check if you run itEPSS 0.33%Mar 23, 2026
- Critical9.3A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill and PTC FlexPLM.Check if you run itEPSS 0.72%Mar 23, 2026
- Medium5.5A vulnerability has been found in itsourcecode Free Hotel Reservation System 1.0.Check if you run itEPSS 0.26%Mar 23, 2026
- High8.6A flaw has been found in TOTOLINK X6000R 9.4.0cu.1360_B20241207/9.4.0cu.1498_B20250826.Check if you run itEPSS 3.09%Mar 23, 2026
- High8.8OpenClaw before 2026.3.7 contains an improper header validation vulnerability in fetchWithSsrFGuard that forwards custom authorization headers across cross-origin redirects.Check if you run itEPSS 0.32%Mar 23, 2026
- High8.1Connect-CMS is a content management system.Check if you run itEPSS 0.31%Mar 23, 2026
- High7.5Connect-CMS is a content management system.Check if you run itEPSS 0.28%Mar 23, 2026
- Medium6.8Connect-CMS is a content management system.Check if you run itEPSS 0.36%Mar 23, 2026
- Medium4.8Connect-CMS is a content management system.Check if you run itEPSS 0.20%Mar 23, 2026
- High8.7Connect-CMS is a content management system.Check if you run itEPSS 0.33%Mar 23, 2026
- High8.8Connect-CMS is a content management system.Check if you run itEPSS 0.47%Mar 23, 2026
- Medium5.5systemd, a system and service manager, (as PID 1) hits an assert and freezes execution when an unprivileged IPC API call is made with spurious data.Check if you run itEPSS 0.13%Mar 23, 2026
- Medium5.8OpenClaw versions prior to 2026.3.7 contain a sandbox escape vulnerability in the /acp spawn command that allows authorized sandboxed sessions to initialize host-side ACP runtime.Check if you run itEPSS 0.11%Mar 23, 2026
- Low2.1OpenClaw versions prior to 2026.3.7 contain a shell approval gating bypass vulnerability in system.run dispatch-wrapper handling that allows attackers to skip shell wr…Check if you run itEPSS 0.11%Mar 23, 2026
- High7.5An incomplete fix for CVE-2024-47778 allows an out-of-bounds read in gst_wavparse_adtl_chunk() function.Check if you run itEPSS 0.23%Mar 23, 2026
- Critical9.3Census CSWeb 8.0.1 allows "app/config" to be reachable via HTTP in some deployments.Check if you run itEPSS 0.41%Mar 23, 2026
- Medium5.1Census CSWeb 8.0.1 allows stored cross-site scripting in user supplied fields.Check if you run itEPSS 0.21%Mar 23, 2026
Sort