Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.47%Feb 26, 2026
- Critical9.9OpenLIT is an open source platform for AI engineering.Check if you run itEPSS 0.58%Feb 26, 2026
- High7.7WPGraphQL provides a GraphQL API for WordPress sites.Check if you run itEPSS 1.40%Feb 26, 2026
- High8.8LiveCode is an open-source, client-side code playground.Check if you run itEPSS 0.39%Feb 25, 2026
- Medium6.1Repostat is a React component to fetch and display GitHub repository info.Check if you run itEPSS 0.29%Feb 25, 2026
- Low2.9The CombinedMult function in the CIRCL ecc/p384 package (secp384r1 curve) produces an incorrect value for specific inputs.Check if you run itEPSS 0.40%Feb 24, 2026
- High8.1PJSIP is a free and open source multimedia communication library written in C.Check if you run itEPSS 0.39%Feb 20, 2026
- UnknownXStream XStream Deserialization of Untrusted DataPatch nowKEVEPSS 11.38%Feb 14, 2026
- Unknowntriliumnotes trilium Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 2.92%Jan 29, 2026
- Critical9.9Hackage package and doc upload stored XSS vulnerabilityCheck if you run itEPSS 0.43%Jan 16, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - zero initialize memory allocated via sock_kmalloc Several crypto user API contexts…Check if you run itEPSS 0.15%Jan 14, 2026
- Medium6.6Spinnaker is an open source, multi-cloud continuous delivery platform.Check if you run itEPSS 0.17%Jan 5, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: bpf: Disable preemption in bpf_event_output We received report [1] of kernel crash, which is caused…Check if you run itEPSS 0.15%Dec 30, 2025
- UnknownIn the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced When re-injecting a soft interr…Check if you run itEPSS 0.19%Dec 16, 2025
- High8.4Lightning Flow Scanner provides a A CLI plugin, VS Code Extension and GitHub Action for analysis and optimization of Salesforce Flows.Check if you run itEPSS 0.19%Dec 12, 2025
- High7.8Improper neutralization of special elements used in a command ('command injection') in Copilot allows an unauthorized attacker to execute code locally.Check if you run itEPSS 0.36%Dec 9, 2025
- Medium4.3HedgeDoc is an open source, real-time, collaborative, markdown notes application.Check if you run itEPSS 0.10%Dec 5, 2025
- Critical9.8MCP Watch is a comprehensive security scanner for Model Context Protocol (MCP) servers.Open the advisoryDec 1, 2025
- Unknowngithub github Deserialization of Untrusted DataPatch nowKEVEPSS 21.24%Nov 10, 2025
- Unknownreposilite reposilite Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 3.12%Oct 17, 2025
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: cgroup: split cgroup_destroy_wq into 3 workqueues A hung task can occur during [1] LTP cgroup testi…Check if you run itEPSS 0.15%Oct 4, 2025
- Low1.9A security vulnerability has been detected in appneta tcpreplay 4.5.1.Open the advisoryAug 29, 2025
- Critical9.1tj-actions/branch-names has a Command Injection VulnerabilityCheck if you run itEPSS 0.65%Jul 25, 2025
- Critical10.0WilderForge is a Wildermyth coremodding API.Check if you run itEPSS 0.79%Jun 9, 2025
- Medium6.9A Use of Out-of-range Pointer Offset vulnerability in sslh leads to denial of service on some architectures.This issue affects sslh before 2.2.4.Check if you run itEPSS 0.47%Jun 2, 2025