Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9Snews CMS 1.7 contains a cross-site request forgery vulnerability that allows attackers to change administrator credentials without authentication by crafting malicious HTML forms.Check if you run itEPSS 0.16%Apr 4, 2026
- High7.2Web3.py 7.15.0 through 7.16.0 and 8.0.0b2 through 8.0.0 CCIP-Read SSRF BypassCheck if you run itEPSS 0.34%Apr 4, 2026
- Medium5.4Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.Check if you run itEPSS 0.13%Apr 4, 2026
- Medium5.3Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.Check if you run itEPSS 0.23%Apr 4, 2026
- High8.8Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.Check if you run itEPSS 0.38%Apr 4, 2026
- Medium6.5Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.Check if you run itEPSS 0.26%Apr 4, 2026
- Medium5.4Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.Check if you run itEPSS 0.18%Apr 4, 2026
- High7.5nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm.Check if you run itEPSS 0.63%Apr 3, 2026
- Critical9.1PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.42%Apr 3, 2026
- High7.7PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.35%Apr 3, 2026
- Medium6.5Emlog is an open source website building system.Check if you run itEPSS 0.56%Apr 3, 2026
- Medium5.9LTI JupyterHub Authenticator is a JupyterHub authenticator for LTI.Check if you run itEPSS 0.41%Apr 3, 2026
- Critical9.3Hirschmann HiOS and HiSecOS products RSP, RSPE, RSPS, RSPL, MSP, EES, EESX, GRS, OS, RED, EAGLE contain an authentication bypass vulnerability in the HTTP(S) managemen…Check if you run itEPSS 0.50%Apr 3, 2026
- Medium5.0OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.Check if you run itEPSS 0.18%Apr 3, 2026
- High7.1prompts.chat prior to commit 30a8f04 contains a server-side request forgery vulnerability in the Fal.ai media status polling feature that allows authenticated users to…Check if you run itEPSS 0.30%Apr 3, 2026
- High8.7prompts.chat prior to commit 7b81836 contains multiple authorization bypass vulnerabilities due to missing isPrivate checks across API endpoints and page metadata gene…Check if you run itEPSS 0.28%Apr 3, 2026
- Medium5.3prompts.chat prior to commit 1464475 contains a blind server-side request forgery vulnerability in the Wiro media generator that allows authenticated users to perform…Check if you run itEPSS 0.19%Apr 3, 2026
- Critical10.0ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI.Check if you run itEPSS 0.53%Apr 3, 2026
- Critical9.8Fortinet FortiClient EMS Improper Access Control VulnerabilityPatch nowKEVEPSS 93.98%Apr 3, 2026
- Critical9.8Server-side request forgery (ssrf) in Microsoft Bing allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.90%Apr 3, 2026
- Low2.1A security vulnerability has been detected in mixelpixx Google-Research-MCP 1e062d7bd887bfe5f6e582b6cc288bb897b35cf2/ca613b736ab787bc926932f59cddc69457185a83.Check if you run itEPSS 0.35%Apr 3, 2026
- Critical9.9Budibase is an open-source low-code platform.Check if you run itEPSS 0.43%Apr 3, 2026
- Critical9.8In the Linux kernel, the following vulnerability has been resolved: nfsd: fix heap overflow in NFSv4.0 LOCK replay cache The NFSv4.0 replay cache uses a fixed 112-byte…Check if you run itEPSS 1.20%Apr 3, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: HID: bpf: prevent buffer overflow in hid_hw_request right now the returned value is considered to b…Check if you run itEPSS 0.19%Apr 3, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix cache_request leak in cache_release When a reader's file descriptor is closed while in…Check if you run itEPSS 0.16%Apr 3, 2026