Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8openITCOCKPIT is an open source monitoring tool built for different monitoring engines.Check if you run itEPSS 1.40%Apr 14, 2026
- High8.8A missing authentication for critical function vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiO…Check if you run itEPSS 0.28%Apr 14, 2026
- Medium6.5Fortinet Multiple Products Path Traversal VulnerabilityPatch nowKEVEPSS 1.08%Apr 14, 2026
- High8.1Axios is a promise based HTTP client for the browser and Node.js.Check if you run itEPSS 2.02%Apr 10, 2026
- Medium5.5PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.18%Apr 10, 2026
- Medium5.4OpenStack Skyline before 5.0.1, 6.0.0, and 7.0.0 has a DOM-based Cross-Site Scripting (XSS) vulnerability in the console because document.write is used unsafely, which…Check if you run itEPSS 0.30%Apr 10, 2026
- High7.1An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on specific EX and QFX Series…Check if you run itEPSS 0.27%Apr 9, 2026
- Critical9.9Sonicverse is a Self-hosted Docker Compose stack for live radio streaming.Check if you run itEPSS 0.37%Apr 9, 2026
- Medium6.5CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled and FFM is used in Apache Tomcat.Check if you run itEPSS 0.45%Apr 9, 2026
- Critical9.1CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled vulnerability in Apache Tomcat, Apache Tomcat Native.Check if you run itEPSS 0.71%Apr 9, 2026
- High7.0Axios is a promise based HTTP client for the browser and Node.js.Check if you run itEPSS 1.19%Apr 9, 2026
- Medium5.5A weakness has been identified in atototo api-lab-mcp up to 0.2.1.Check if you run itEPSS 0.50%Apr 9, 2026
- Medium4.3Incorrect security UI in Omnibox in Google Chrome on iOS prior to 147.0.7727.55 allowed a remote attacker to perform UI spoofing via a crafted HTML page.Check if you run itEPSS 0.26%Apr 8, 2026
- Medium5.4Incorrect security UI in Omnibox in Google Chrome on iOS prior to 147.0.7727.55 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted domain name.Check if you run itEPSS 0.22%Apr 8, 2026
- Medium5.9Axios is a promise based HTTP client for the browser and Node.js.Check if you run itEPSS 0.75%Apr 8, 2026
- Medium6.5Missing Authorization vulnerability in redpixelstudios RPS Include Content rps-include-content allows Exploiting Incorrectly Configured Access Control Security Levels.…Check if you run itEPSS 0.33%Apr 8, 2026
- UnknownApple iOS/iPadOS/visionOS and macOS Sequoia/Tahoe FaceTime Password DisclosurePatch nowKEVEPSS 0.86%Apr 7, 2026
- UnknownApple macos Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')Patch nowKEVEPSS 0.27%Apr 7, 2026
- UnknownApple iOS/iPadOS and macOS Sequoia/Sonoma/Tahoe Privilege EscalationPatch nowKEVEPSS 0.18%Apr 7, 2026
- UnknownApple Safari/iOS/iPadOS/visionOS/watchOS and macOS Sequoia Interface Spoofing VulnerabilityPatch nowKEVEPSS 0.80%Apr 7, 2026
- Critical9.8Bruno is an open source IDE for exploring and testing APIs.Check if you run itEPSS 0.32%Apr 6, 2026
- Critical9.8Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.Check if you run itEPSS 0.37%Apr 4, 2026
- Critical9.3Hirschmann HiOS and HiSecOS products RSP, RSPE, RSPS, RSPL, MSP, EES, EESX, GRS, OS, RED, EAGLE contain an authentication bypass vulnerability in the HTTP(S) managemen…Check if you run itEPSS 0.50%Apr 3, 2026
- High8.7Hirschmann HiOS devices versions prior to 08.1.00 and 07.1.01 contain a denial of service vulnerability in the EtherNet/IP stack where improper handling of packet leng…Check if you run itEPSS 0.92%Apr 3, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: mm/rmap: fix incorrect pte restoration for lazyfree folios We batch unmap anonymous lazyfree folios…Check if you run itEPSS 0.17%Apr 3, 2026