Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx.Check if you run itEPSS 0.83%Jun 2, 2025
- High7.3Improper Handling of Case Sensitivity vulnerability in Apache Tomcat's GCI servlet allows security constraint bypass of security constraints that apply to the pathInfo component ofCheck if you run itEPSS 2.93%May 29, 2025
- High7.0FreeScout is a free self-hosted help desk and shared mailbox.Check if you run itEPSS 1.12%May 29, 2025
- Critical9.1Deserialization of Untrusted Data vulnerability in Apache InLong.Check this weekEPSS 68.00%May 28, 2025
- Medium6.5Deserialization of Untrusted Data vulnerability in Apache InLong.Check this weekEPSS 80.00%May 28, 2025
- Critical9.8Improper Restriction of Operations within the Bounds of a Memory Buffer and Stack-based Buffer Overflow vulnerabilities were discovered in Apache NuttX RTOS Bluetooth Stack (HCI anCheck if you run itEPSS 1.46%May 26, 2025
- High7.5ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx.Check this weekEPSS 60.00%May 21, 2025
- Medium6.0Heap-based Buffer Overflow vulnerability in Apache ORC.Check if you run itEPSS 0.57%May 14, 2025
- High7.5Exposure of Sensitive Information to an Unauthorized Actor, Insertion of Sensitive Information into Log File vulnerability in the OpenIdAuthorizer of Apache IoTDB.Check this weekEPSS 75.00%May 14, 2025
- High7.5Exposure of Sensitive Information to an Unauthorized Actor, Insertion of Sensitive Information into Log File vulnerability in Apache IoTDB JDBC driver.Check this weekEPSS 75.00%May 14, 2025
- Critical9.8Remote Code Execution with untrusted URI of UDF vulnerability in Apache IoTDB.Check if you run itEPSS 1.44%May 14, 2025
- Low2.3Kirby is an open-source content management system.Check if you run itEPSS 0.59%May 13, 2025
- Medium5.3Incorrect Authorization vulnerability in Apache Superset allows ownership takeover of dashboards, charts or datasets by authenticated users with read permissions.Check if you run itEPSS 1.30%May 13, 2025
- Medium5.3A vulnerability was found in Seeyon Zhiyuan OA Web Application System 8.1 SP2.Check if you run itEPSS 0.57%May 11, 2025
- Medium6.5Uncontrolled Resource Consumption vulnerability in Apache Commons Configuration 1.x.Check if you run itEPSS 2.12%May 9, 2025
- Medium6.9Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ.Check if you run itEPSS 8.96%May 7, 2025
- High7.1Schema parsing in the parquet-avro module of Apache Parquet 1.15.0 and previous versions allows bad actors to execute arbitrary code.Check if you run itEPSS 1.59%May 6, 2025
- High7.5A flaw was found in the mod_auth_openidc module for Apache httpd.Check if you run itEPSS 1.58%Apr 29, 2025
- Critical9.8Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat.Check if you run itEPSS 4.19%Apr 28, 2025
- High7.5Improper Input Validation vulnerability in Apache Tomcat.Check this weekEPSS 61.32%Apr 28, 2025
- Medium5.1A vulnerability, which was classified as problematic, was found in Seeyon Zhiyuan OA Web Application System 8.1 SP2.Check if you run itEPSS 0.31%Apr 28, 2025
- Medium5.1A vulnerability, which was classified as problematic, has been found in Seeyon Zhiyuan OA Web Application System 8.1 SP2.Check if you run itEPSS 0.31%Apr 28, 2025
- High7.5Improper Input Validation vulnerability in Apache Kvrocks.Check this weekEPSS 75.00%Apr 22, 2025
- Critical9.8Deserialization of Untrusted Data vulnerability in Apache ActiveMQ NMS OpenWire Client.Check if you run itEPSS 2.05%Apr 18, 2025
- Medium6.9A vulnerability classified as critical has been found in baseweb JSite 1.0.Check if you run itEPSS 0.75%Apr 18, 2025