Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7A Allocation of Resources Without Limits or Throttling vulnerability in sslh allows attackers to easily exhaust the file descriptors in sslh and deny legitimate users service.ThisCheck if you run itEPSS 0.43%Jun 2, 2025
- Critical9.1Deserialization of Untrusted Data vulnerability in Apache InLong.Check this weekEPSS 68.00%May 28, 2025
- Medium6.5Deserialization of Untrusted Data vulnerability in Apache InLong.Check this weekEPSS 80.00%May 28, 2025
- Low3.3GitHub Desktop is an open-source, Electron-based GitHub app designed for git development.Check this weekEPSS 18.00%May 21, 2025
- Medium4.8A vulnerability was found in iop-apl-uw basestation3 up to 3.0.4 and classified as problematic.Check this weekEPSS 52.00%May 19, 2025
- Low2.3A vulnerability has been found in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3 and classified as problematic.Check this weekEPSS 31.00%May 17, 2025
- Critical9.1Spotipy is a Python library for the Spotify Web API.Check this weekEPSS 63.00%May 15, 2025
- Critical9.3Improper Restriction of XML External Entity Reference vulnerability in bonigarcia webdrivermanager WebDriverManager on Windows, MacOS, Linux (XML parsing components modules) allowsCheck if you run itEPSS 0.56%May 14, 2025
- Medium6.2Bullfrog's DNS over TCP bypasses domain filteringCheck if you run itEPSS 0.49%May 14, 2025
- Medium6.3The OZI action is a GitHub Action that publishes releases to PyPI and mirror releases, signature bundles, and provenance in a tagged release.Check if you run itEPSS 0.43%May 12, 2025
- Medium6.5An issue has been discovered in GitLab CE/EE affecting all versions starting from 17.1 prior to 17.9.8, from 17.10 prior to 17.10.6, and from 17.11 prior to 17.11.2.Check this weekEPSS 41.00%May 9, 2025
- Low3.1The Discourse Code Review Plugin allows users to review GitHub commits on Discourse.Check if you run itEPSS 0.34%May 7, 2025
- High7.1phpgt/Dom provides access to modern DOM APIs.Check if you run itEPSS 0.19%May 6, 2025
- Medium5.3PKCE was implemented in the OAuth implementation in workers-oauth-provider that is part of MCP framework https://github.com/cloudflare/workers-mcp .Check if you run itEPSS 0.57%May 1, 2025
- Medium6.0The OAuth implementation in workers-oauth-provider that is part of MCP framework https://github.com/cloudflare/workers-mcp , did not correctly validate that redirect_uri was on theCheck if you run itEPSS 0.32%May 1, 2025
- Critical9.0LibJS in Ladybird before f5a6704 mishandles the freeing of the vector that arguments_list references, leading to a use-after-free, and allowing remote attackers to execute arbitrarCheck if you run itEPSS 0.68%May 1, 2025
- Medium6.3KHC-INVITATION-AUTOMATION is a GitHub automation script that automatically invites followers of a bot account to join your organization.Check if you run itEPSS 0.38%Apr 29, 2025
- Medium6.0Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners.Check if you run itEPSS 0.23%Apr 21, 2025
- Critical9.8Adept is a language for general purpose programming.Check if you run itEPSS 0.57%Apr 21, 2025
- High8.7z80pack is a mature emulator of multiple platforms with 8080 and Z80 CPU.Check if you run itEPSS 0.53%Apr 18, 2025
- High8.6An improper neutralization of input vulnerability was identified in GitHub Enterprise Server that allowed cross-site scripting in GitHub Markdown that used math blocks.Check if you run itEPSS 0.30%Apr 17, 2025
- High7.1A Remote Code Execution (RCE) vulnerability was identified in GitHub Enterprise Server that allowed attackers to execute arbitrary code by exploiting the pre-receive hook functionaCheck if you run itEPSS 1.29%Apr 17, 2025
- Medium5.3A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed a user to see the names of private repositories that they wouldn't otherwise have acceCheck if you run itEPSS 0.42%Apr 17, 2025
- Low2.2Weblate is a web based localization tool.Check if you run itEPSS 0.38%Apr 15, 2025
- High8.6reviewdog/action-setup GitHub Action Embedded Malicious Code VulnerabilityPatch nowKEVEPSS 2.48%Mar 19, 2025