Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.0SiYuan is an open-source personal knowledge management system.Check if you run itEPSS 0.41%May 14, 2026
- Critical9.4SiYuan is an open-source personal knowledge management system.Check if you run itEPSS 0.55%May 14, 2026
- Critical9.4SiYuan is an open-source personal knowledge management system.Check if you run itEPSS 0.55%May 14, 2026
- High8.3SiYuan is an open-source personal knowledge management system.Check if you run itEPSS 0.43%May 14, 2026
- Medium5.9Gotenberg is a Docker-powered stateless API for PDF files.Check if you run itEPSS 0.36%May 14, 2026
- High8.6Gotenberg is a Docker-powered stateless API for PDF files.Check if you run itEPSS 0.42%May 14, 2026
- Medium5.3Gotenberg is a Docker-powered stateless API for PDF files.Check if you run itEPSS 0.25%May 14, 2026
- Medium5.3Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investigation, transparency, and verification.Check if you run itEPSS 0.28%May 14, 2026
- Critical9.6soundcloud-rpc is a SoundCloud Client with Discord Rich Presence, Dark Mode, Last.fm and AdBlock support.Check if you run itEPSS 0.61%May 14, 2026
- Medium6.9Vvveb before 1.0.8.3 contains a directory listing information disclosure vulnerability that allows unauthenticated attackers to enumerate files and directories by acce…Check if you run itEPSS 0.42%May 14, 2026
- Medium5.3Vvveb before 1.0.8.3 contains a stored cross-site scripting vulnerability in the customer signup flow where the Signup::addUser() controller copies raw POST username v…Check if you run itEPSS 0.38%May 14, 2026
- Medium6.6PlaywrightCapture is a simple replacement for splash using playwright.Check if you run itEPSS 0.54%May 13, 2026
- Medium6.9The Angular SSR is a server-rise rendering tool for Angular applications.Check if you run itEPSS 0.30%May 13, 2026
- High7.2CubeCart is an ecommerce software solution.Check if you run itEPSS 0.54%May 13, 2026
- Medium5.1Quark Drive before 0.8.5 contains a stored cross-site scripting vulnerability in the System Configuration page where the template renders push_config key names using V…Check if you run itEPSS 0.32%May 13, 2026
- Medium5.0The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows a reflected cross site scripting (XSS) attack.Check if you run itEPSS 0.14%May 13, 2026
- Medium6.1A cross-site scripting (XSS) vulnerability exists in Alinto SOGo, version 5.12.7.Patch nowKEVEPSS 0.51%May 13, 2026
- Medium4.7Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 0.25%May 13, 2026
- High7.5Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 0.76%May 13, 2026
- High8.1Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 0.67%May 13, 2026
- Low2.9Astro is a web framework.Check if you run itEPSS 0.20%May 13, 2026
- Medium4.3Hono is a Web application framework that provides support for any JavaScript runtime.Check if you run itEPSS 0.34%May 13, 2026
- Medium6.1Hono is a Web application framework that provides support for any JavaScript runtime.Check if you run itEPSS 0.22%May 13, 2026
- High8.7Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in mtrudel bandit allows unauthenticated remote denial of service via worker process exhaustion.Check if you run itEPSS 0.94%May 13, 2026
- High7.2The Custom Twitter Feeds plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 2.5.4.Check if you run itEPSS 0.51%May 13, 2026