Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Gokapi is a self-hosted file sharing server with automatic expiration and encryption support.Check if you run itEPSS 0.30%Mar 13, 2026
- Medium6.5Issue summary: An OpenSSL TLS 1.3 server may fail to negotiate the expected preferred key exchange group when its key exchange group configuration includes the default…Check if you run itEPSS 0.51%Mar 13, 2026
- High7.5HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and Cosy+ with firmware 23.xx before 23.0s3 allows unauthenticated attack…Check if you run itEPSS 0.65%Mar 13, 2026
- High7.0Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in Erlang OTP (inets httpd module) allows HTTP Request Smuggling.Check if you run itEPSS 0.47%Mar 13, 2026
- Medium6.9wpDiscuz before 7.6.47 contains a missing rate limiting vulnerability that allows unauthenticated attackers to subscribe arbitrary email addresses to post notification…Check if you run itEPSS 0.33%Mar 13, 2026
- Medium5.3wpDiscuz before 7.6.47 contains a cross-site request forgery vulnerability in the getFollowsPage() function that allows attackers to trigger unauthorized actions witho…Check if you run itEPSS 0.16%Mar 13, 2026
- Medium6.1wpDiscuz before 7.6.47 contains a cross-site request forgery vulnerability that allows attackers to delete all comments associated with an email address by crafting a…Check if you run itEPSS 0.17%Mar 13, 2026
- Medium4.3The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions u…Check if you run itEPSS 0.22%Mar 13, 2026
- High7.7The web interface on multiple Omada switches does not adequately validate certain external inputs, which may lead to out-of-bound memory access when processing crafted requests.Check if you run itEPSS 1.02%Mar 13, 2026
- Medium6.3Malicious configuration can lead to unauthorized file access in Apache Livy.Check if you run itEPSS 0.50%Mar 13, 2026
- Medium5.9IBM Sterling Partner Engagement Manager 6.2.3.0 through 6.2.3.5 and 6.2.4.0 through 6.2.4.2 could allow an attacker to obtain sensitive information from the query stri…Check if you run itEPSS 0.21%Mar 13, 2026
- Medium5.9This is an uncontrolled resource consumption vulnerability (CWE-400) that can lead to Denial of Service (DoS).Check if you run itEPSS 0.74%Mar 12, 2026
- Medium4.6ImpactWhen an application passes user-controlled input to the upgrade option of client.request(), an attacker can inject CRLF sequences (\r\n) to: * Inject arbitrary H…Check if you run itEPSS 0.28%Mar 12, 2026
- Medium6.3Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.41%Mar 12, 2026
- Critical9.3Tolgee is an open-source localization platform.Check if you run itEPSS 0.44%Mar 12, 2026
- Critical9.3Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.95%Mar 12, 2026
- Medium6.3Cap'n Proto is a data interchange format and capability-based RPC system.Check if you run itEPSS 0.21%Mar 12, 2026
- Medium6.3Cap'n Proto is a data interchange format and capability-based RPC system.Check if you run itEPSS 0.21%Mar 12, 2026
- Critical9.8Undici allows duplicate HTTP Content-Length headers when they are provided in an array with case-variant names (e.g., Content-Length and content-length).Check if you run itEPSS 0.51%Mar 12, 2026
- Critical9.1Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.40%Mar 12, 2026
- Low1.7Backstage is an open framework for building developer portals.Check if you run itEPSS 0.49%Mar 12, 2026
- Medium4.7Backstage is an open framework for building developer portals.Check if you run itEPSS 0.24%Mar 12, 2026
- High8.2ZeptoClaw is a personal AI assistant.Check if you run itEPSS 0.26%Mar 12, 2026
- Medium5.3Uptime Kuma is an open source, self-hosted monitoring tool.Check if you run itEPSS 0.86%Mar 12, 2026
- Medium5.4A flaw was found in mirror-registry where an authenticated user can trick the system into accessing unintended internal or restricted systems by providing malicious web addresses.Check if you run itEPSS 0.16%Mar 12, 2026