Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Valkey is a distributed key-value database.Check if you run itEPSS 0.67%Feb 23, 2026
- Low2.7Improper neutralization of special elements in user-supplied input within the ZIA Admin UI could allow an authenticated administrator to access or retrieve unauthorize…Check if you run itEPSS 0.17%Feb 23, 2026
- Low2.7Improper validation of user-supplied input in the ZIA Admin UI could allow an authenticated administrator to initiate backend functions through specific input fields i…Check if you run itEPSS 0.20%Feb 23, 2026
- Low1.2A vulnerability has been found in datapizza-labs datapizza-ai 0.0.2.Check if you run itEPSS 1.09%Feb 23, 2026
- Low2.0A vulnerability was detected in funadmin up to 7.1.0-rc4.Check if you run itEPSS 0.46%Feb 22, 2026
- High7.1OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI.Check if you run itEPSS 0.32%Feb 21, 2026
- Critical9.6A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and other Java applications.Check if you run itEPSS 1.33%Jan 7, 2026
- Medium6.6Spinnaker is an open source, multi-cloud continuous delivery platform.Check if you run itEPSS 0.17%Jan 5, 2026
- Low2.1A security vulnerability has been detected in milvus up to 2.6.7.Check if you run itEPSS 0.35%Jan 5, 2026
- Low2.0A vulnerability was determined in PluXml up to 5.8.22.Check if you run itEPSS 0.47%Jan 2, 2026
- Medium6.3Improper Input Validation vulnerability in qs (parse modules) allows HTTP DoS.This issue affects qs: < 6.14.1.Check if you run itEPSS 0.45%Dec 29, 2025
- Critical10.0Cisco Multiple Products Improper Input Validation VulnerabilityPatch nowKEVEPSS 32.39%Dec 17, 2025
- High7.4FreshRSS is a self-hosted RSS feed aggregator.Check if you run itEPSS 0.70%Dec 16, 2025
- High8.8edoc-doctor-appointment-system v1.0.1 is vulnerable to Cross Site Scripting (XSS) in admin/add-session.php via the "title" parameter.Check if you run itEPSS 0.56%Dec 11, 2025
- High7.5Improper input validation in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 1.02%Dec 9, 2025
- High7.5A flaw was found in Undertow that can cause remote denial of service attacks.Check if you run itEPSS 1.36%Dec 3, 2025
- Medium6.9mdast-util-to-hast is an mdast utility to transform to hast.Open the advisoryDec 1, 2025
- High8.7OrangeHRM is a comprehensive human resource management (HRM) system.Open the advisoryNov 29, 2025
- Critical9.4A SQL Injection vulnerability on an endpoint in BEIMS Contractor Web, a legacy product that is no longer maintained or patched by the vendor, allows an unauthorised us…Open the advisoryNov 17, 2025
- Critical9.1Adobe Commerce and Magento Improper Input Validation VulnerabilityPatch nowKEVEPSS 94.31%Sep 9, 2025
- Critical9.4N-able N-Central Command Injection VulnerabilityPatch nowKEVEPSS 3.45%Aug 13, 2025
- High8.8Google Chromium ANGLE and GPU Improper Input Validation VulnerabilityPatch nowKEVEPSS 10.93%Jul 15, 2025
- High7.8Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 2.33%May 13, 2025
- High8.8Microsoft Project Remote Code Execution VulnerabilityPatch nowKEVEPSS 8.19%Aug 13, 2024
- High8.8Microsoft Windows MSHTML Platform Security Feature Bypass VulnerabilityPatch nowKEVEPSS 3.94%May 14, 2024