Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5A zip slip vulnerability in the Admin import functionality of CTFd v3.8.1-18-gdb5a18c4 allows attackers to write arbitrary files outside the intended directories via s…Check if you run itEPSS 0.53%Mar 18, 2026
- High8.2The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization on the REST API endpoin…Check if you run itEPSS 0.44%Mar 18, 2026
- High7.3The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 4.1.2.Check if you run itEPSS 0.56%Mar 18, 2026
- Medium5.3The Post SMTP plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the function in all versions up to, and incl…Check if you run itEPSS 0.35%Mar 18, 2026
- High8.1MuraCMS through 10.1.10 contains a CSRF vulnerability that allows attackers to permanently destroy all deleted content stored in the trash system through a simple CSRF attack.Check if you run itEPSS 0.13%Mar 18, 2026
- High7.1The update address CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to manipulate user address information through CSRF.Check if you run itEPSS 0.11%Mar 18, 2026
- High8.8The Trash Restore CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to restore deleted content from the trash to unauthorized locations through CSRF.Check if you run itEPSS 0.13%Mar 18, 2026
- Medium6.5MuraCMS through 10.1.10 contains a CSRF vulnerability in the bundle creation functionality (csettings.cfc createBundle method) that allows unauthenticated attackers to…Check if you run itEPSS 0.17%Mar 18, 2026
- High8.0MuraCMS through 10.1.10 contains a CSRF vulnerability in the Add To Group functionality for user management (cUsers.cfc addToGroup method) that allows attackers to esc…Check if you run itEPSS 0.13%Mar 18, 2026
- High8.8The import form CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to upload and install malicious form definitions through a CSRF attack.Check if you run itEPSS 0.17%Mar 18, 2026
- Medium6.6In Juju from version 3.0.0 through 3.6.18, when a secret owner grants permissions to a secret to a grantee, the secret owner relies exclusively on a predictable XID of…Check if you run itEPSS 0.39%Mar 18, 2026
- High7.0Glances is an open-source system cross-platform monitoring tool.Check if you run itEPSS 0.21%Mar 18, 2026
- High7.1Kube-router is a turnkey solution for Kubernetes networking.Check if you run itEPSS 0.46%Mar 18, 2026
- Medium6.5Cockpit is a headless content management system.Check if you run itEPSS 0.41%Mar 18, 2026
- Medium6.4The WP Go Maps (formerly WP Google Maps) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘wpgmza_custom_js’ parameter in all versions up to,…Check if you run itEPSS 0.27%Mar 18, 2026
- High7.0Kanboard is project management software focused on Kanban methodology.Check if you run itEPSS 0.62%Mar 18, 2026
- Medium6.3Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 0.55%Mar 18, 2026
- High7.2xiaoheiFS is a self-hosted financial and operational system for cloud service businesses.Check if you run itEPSS 0.51%Mar 18, 2026
- High7.2xiaoheiFS is a self-hosted financial and operational system for cloud service businesses.Check if you run itEPSS 0.89%Mar 18, 2026
- High7.1Edimax GS-5008PL firmware version 1.00.54 and prior contain an insecure credential storage vulnerability that allows attackers to obtain administrator credentials by a…Check if you run itEPSS 0.29%Mar 17, 2026
- Critical9.2Edimax GS-5008PL firmware versions 1.00.54 and prior contain an authentication bypass vulnerability that allows unauthenticated attackers to access the management interface.Check if you run itEPSS 0.84%Mar 17, 2026
- Medium5.1Edimax GS-5008PL firmware version 1.00.54 and prior contain a stored cross-site scripting vulnerability in the system_name_set.cgi script that allows attackers to inje…Check if you run itEPSS 0.30%Mar 17, 2026
- Medium5.1Edimax GS-5008PL firmware version 1.00.54 and prior contain a cross-site request forgery vulnerability that allows remote attackers to perform unauthorized administrat…Check if you run itEPSS 0.24%Mar 17, 2026
- High8.7Edimax GS-5008PL firmware version 1.00.54 and prior use cleartext HTTP for the web management interface without implementing TLS or SSL encryption.Check if you run itEPSS 0.19%Mar 17, 2026
- Medium6.5IBM Planning Analytics Local 2.1.0 through 2.1.17 could allow an unauthorized access to sensitive application data and administrative functionalities due to lack of pr…Check if you run itEPSS 0.34%Mar 17, 2026