Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.3immich is a high performance self-hosted photo and video management solution.Check if you run itEPSS 0.45%Apr 3, 2026
- High7.5Budibase is an open-source low-code platform.Check if you run itEPSS 0.30%Apr 3, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Limit BO list entry count to prevent resource exhaustion Userspace can pass an arbitrar…Check if you run itEPSS 0.12%Apr 3, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: soc: microchip: mpfs: Fix memory leak in mpfs_sys_controller_probe() In mpfs_sys_controller_probe()…Check if you run itEPSS 0.12%Apr 3, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: igc: fix page fault in XDP TX timestamps handling If an XDP application that requested TX timestamp…Check if you run itEPSS 0.13%Apr 3, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free of share_conf in compound request smb2_get_ksmbd_tcon() reuses work->tcon…Check if you run itEPSS 0.33%Apr 3, 2026
- Medium5.1A weakness has been identified in Casdoor 2.356.0.Check if you run itEPSS 0.57%Apr 3, 2026
- High8.8An issue was discovered in Biztalk360 before 11.5.Check if you run itEPSS 0.46%Apr 3, 2026
- Low2.1A vulnerability was identified in Casdoor 2.356.0.Check if you run itEPSS 0.43%Apr 3, 2026
- Medium5.3In Tornado before 6.5.5, cookie attribute injection could occur because the domain, path, and samesite arguments to .RequestHandler.set_cookie were not checked for cra…Check if you run itEPSS 0.29%Apr 3, 2026
- Critical9.8Server-side request forgery (ssrf) in Azure Databricks allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.90%Apr 3, 2026
- High8.8Server-side request forgery (ssrf) in Azure Custom Locations Resource Provider (RP) allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.75%Apr 3, 2026
- Critical9.2HiOS Switch Platform versions 09.1.00 through 09.4.04 and 10.0.00 through 10.3.00 contain a denial-of-service vulnerability in the web interface that allows remote att…Check if you run itEPSS 0.51%Apr 2, 2026
- Low2.7Ella Core is a 5G core designed for private networks.Check if you run itEPSS 0.31%Apr 2, 2026
- Critical9.3Hirschmann HiEOS devices versions prior to 01.1.00 contain an authentication bypass vulnerability in the HTTP(S) management module that allows unauthenticated remote a…Check if you run itEPSS 0.46%Apr 2, 2026
- Medium5.5A vulnerability was identified in appsmithorg appsmith up to 1.97.Check if you run itEPSS 0.51%Apr 2, 2026
- Low2.0A vulnerability was determined in Dataease SQLbot up to 1.6.0.Check if you run itEPSS 0.38%Apr 2, 2026
- High7.6The Go MCP SDK used Go's standard encoding/json.Check if you run itEPSS 0.66%Apr 2, 2026
- Medium5.5A security flaw has been discovered in Newgen OmniDocs up to 12.0.00.Check if you run itEPSS 0.51%Apr 2, 2026
- Medium6.5Rack is a modular Ruby web server interface.Check if you run itEPSS 0.28%Apr 2, 2026
- High7.5Rack is a modular Ruby web server interface.Check if you run itEPSS 0.66%Apr 2, 2026
- Medium5.3ewe is a Gleam web server.Check if you run itEPSS 0.41%Apr 2, 2026
- Medium5.3SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speec…Check if you run itEPSS 0.43%Apr 2, 2026
- High7.1A denial-of-service vulnerability was identified in TP-Link Tapo C520WS v2.6 within the HTTP request path parsing logic.Check if you run itEPSS 0.43%Apr 2, 2026
- High8.7An authentication bypass vulnerability within the HTTP handling of the DS configuration service in TP-Link Tapo C520WS v2.6 was identified, due to inconsistent parsing…Check if you run itEPSS 0.48%Apr 2, 2026