Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier.Check if you run itEPSS 0.59%Feb 27, 2026
- Medium6.9The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier.Check if you run itEPSS 0.59%Feb 27, 2026
- High8.7The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests.Check if you run itEPSS 0.49%Feb 27, 2026
- High8.7The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests.Check if you run itEPSS 0.49%Feb 27, 2026
- Medium6.9The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier.Check if you run itEPSS 0.37%Feb 27, 2026
- High8.7The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests.Check if you run itEPSS 0.51%Feb 27, 2026
- Medium5.7SteVe is an open-source EV charging station management system.Check if you run itEPSS 0.29%Feb 26, 2026
- Medium6.5hoppscotch is an open source API development ecosystem.Check if you run itEPSS 0.39%Feb 26, 2026
- High8.3hoppscotch is an open source API development ecosystem.Check if you run itEPSS 0.43%Feb 26, 2026
- Critical9.1hoppscotch is an open source API development ecosystem.Check if you run itEPSS 0.67%Feb 26, 2026
- Low1.3Discourse is an open source discussion platform.Check if you run itEPSS 0.37%Feb 26, 2026
- Critical9.3OpenViking through version 0.1.18, prior to commit 0251c70, contains a broken access control vulnerability that allows unauthenticated attackers to gain ROOT privilege…Check if you run itEPSS 0.45%Feb 26, 2026
- High8.5Unitree Go2 firmware versions V1.1.7 through V1.1.9, and V1.1.11 (EDU) do not implement DDS authentication or authorization for the Eclipse CycloneDDS topic rt/api/pro…Check if you run itEPSS 0.42%Feb 26, 2026
- High7.7Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336) exists in Workflows in Kibana which could allow an attacker to read arbitrary files fr…Check if you run itEPSS 0.45%Feb 26, 2026
- High7.5Discourse is an open source discussion platform.Check if you run itEPSS 1.48%Feb 26, 2026
- Low2.3VideoLAN VLC for Android prior to version 3.7.0 contains a path traversal vulnerability in the Remote Access Server routing for the authenticated endpoint GET /download.Check if you run itEPSS 0.42%Feb 26, 2026
- High7.5Discourse is an open source discussion platform.Check if you run itEPSS 0.40%Feb 26, 2026
- Medium6.5Discourse is an open source discussion platform.Check if you run itEPSS 1.14%Feb 26, 2026
- Low1.7Fleet is open source device management software.Check if you run itEPSS 0.27%Feb 26, 2026
- Critical9.9OpenLIT is an open source platform for AI engineering.Check if you run itEPSS 0.58%Feb 26, 2026
- High7.7WPGraphQL provides a GraphQL API for WordPress sites.Check if you run itEPSS 1.40%Feb 26, 2026
- High8.8WireGuard Portal (or wg-portal) is a web-based configuration portal for WireGuard server management.Check if you run itEPSS 0.56%Feb 26, 2026
- Low2.1ZITADEL is an open source identity management platform.Check if you run itEPSS 0.38%Feb 26, 2026
- High7.2Astro is a web framework.Check if you run itEPSS 0.42%Feb 26, 2026
- High8.6Mailpit is an email testing tool and API for developers.Check if you run itEPSS 0.62%Feb 26, 2026
Sort