Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.7Tinyauth is an authentication and authorization server.Check if you run itEPSS 0.33%Apr 2, 2026
- High7.1Glances is an open-source system cross-platform monitoring tool.Check if you run itEPSS 0.47%Apr 2, 2026
- Critical10.0FastMCP is a Pythonic way to build MCP servers and clients.Check if you run itEPSS 1.37%Apr 2, 2026
- High8.7In Progress Flowmon versions prior to 12.5.8, a vulnerability exists whereby an authenticated low-privileged user may craft a request during the report generation proc…Check if you run itEPSS 0.57%Apr 2, 2026
- High8.1A flaw was found in Keycloak.Check if you run itEPSS 0.48%Apr 2, 2026
- High7.5A flaw was found in Keycloak.Check if you run itEPSS 0.86%Apr 2, 2026
- High8.7Allocation of Resources Without Limits or Throttling vulnerability in gleam-wisp wisp allows a denial of service via multipart form body parsing.Check if you run itEPSS 0.78%Apr 2, 2026
- High7.5The W3 Total Cache plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 2.9.3.Check if you run itEPSS 2.66%Apr 2, 2026
- Medium6.4The Webmention plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.6.2 via the 'Tools::read' function.Check if you run itEPSS 0.20%Apr 2, 2026
- High7.2The Webmention plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.6.2 in the 'MF2::parse_authorpage' function vi…Check if you run itEPSS 0.30%Apr 2, 2026
- Low1.9A vulnerability was found in priyankark a11y-mcp up to 1.0.5.Check if you run itEPSS 0.14%Apr 2, 2026
- Medium5.5A vulnerability has been found in AlejandroArciniegas mcp-data-vis bc597e391f184d2187062fd567599a3cb72adf51/de5a51525a69822290eaee569a1ab447b490746d.Check if you run itEPSS 0.41%Apr 2, 2026
- High8.8IBM DataPower Gateway 10.6CD 10.6.1.0 through 10.6.5.0 and IBM DataPower Gateway 10.5.0 10.5.0.0 through 10.5.0.20 and IBM DataPower Gateway 10.6.0 10.6.0.0 through 10…Check if you run itEPSS 0.17%Apr 1, 2026
- High8.2Flask-HTTPAuth provides Basic, Digest and Token HTTP authentication for Flask routes.Check if you run itEPSS 0.48%Apr 1, 2026
- Medium5.3IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.…Check if you run itEPSS 0.40%Apr 1, 2026
- Medium4.7IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.…Check if you run itEPSS 0.25%Apr 1, 2026
- Medium5.3IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.…Check if you run itEPSS 0.37%Apr 1, 2026
- Medium5.4Payload is a free and open source headless content management system.Check if you run itEPSS 0.16%Apr 1, 2026
- High8.2Payload is a free and open source headless content management system.Check if you run itEPSS 0.40%Apr 1, 2026
- High7.7Payload is a free and open source headless content management system.Check if you run itEPSS 0.35%Apr 1, 2026
- High7.4Clerk JavaScript is the official JavaScript repository for Clerk authentication.Check if you run itEPSS 0.40%Apr 1, 2026
- Critical9.8Cr*nMaster (cronmaster) is a Cronjob management UI with human readable syntax, live logging and log history for cronjobs.Check if you run itEPSS 0.91%Apr 1, 2026
- Medium6.8Docker Model Runner (DMR) is software used to manage, run, and deploy AI models using Docker.Check if you run itEPSS 0.29%Apr 1, 2026
- Critical9.8A vulnerability in Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying o…Check if you run itEPSS 0.91%Apr 1, 2026
- Medium6.5A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to execute arbitrary code…Check if you run itEPSS 0.39%Apr 1, 2026