Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1SolidCAM-GPPL-IDE is an unofficial, independently developed extension, Postprocessor IDE for SolidCAM.Check if you run itEPSS 0.61%May 8, 2026
- Medium5.4Plunk is an open-source email platform built on top of AWS SES.Check if you run itEPSS 0.24%May 8, 2026
- High7.1Brave CMS is an open-source CMS.Check if you run itEPSS 0.45%May 8, 2026
- Medium6.1In th30d4y/IP from version 1.0.1 to before version 2.0.1, a DOM-Based Cross-Site Scripting (XSS) vulnerability was identified in an IP Reputation Checker application.Check if you run itEPSS 0.25%May 8, 2026
- High8.7Brave CMS is an open-source CMS.Check if you run itEPSS 0.37%May 8, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix sync handling in amdgpu_dma_buf_move_notify Invalidating a dmabuf will impact other…Check if you run itEPSS 0.16%May 8, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Set DMA segment size to avoid debug warnings When using V3D rendering with CONFIG_DMA_API_…Check if you run itEPSS 0.16%May 8, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: restore failed global reservations to subpool Commit a833a693a490 ("mm: hugetlb: fix in…Check if you run itEPSS 0.16%May 8, 2026
- High8.7Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.Check if you run itEPSS 0.48%May 8, 2026
- Medium6.4The Sky Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the custom post type in all versions up to, and including, 3.3.2.Check if you run itEPSS 0.35%May 8, 2026
- Low3.0In OpenStack Ironic before 35.0.2 (in a certain non-default configuration), instance_info['ks_template'] is rendered without sandboxing.Check if you run itEPSS 0.35%May 8, 2026
- Medium4.9Kimai is an open-source time tracking application.Check if you run itEPSS 0.42%May 8, 2026
- Medium5.5electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client.Check if you run itEPSS 0.11%May 8, 2026
- Critical9.6electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client.Check if you run itEPSS 0.51%May 8, 2026
- High8.4electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client.Check if you run itEPSS 0.22%May 8, 2026
- High8.6LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format.Check if you run itEPSS 0.66%May 8, 2026
- Medium4.8wlc is a Weblate command-line client using Weblate's REST API.Check if you run itEPSS 0.30%May 8, 2026
- Low2.0An Exposed IOCTL with Insufficient Access Control vulnerability in AsusPTPFilter allows a local user to bypass driver security mechanisms and obtain restricted touchpa…Check if you run itEPSS 0.12%May 8, 2026
- Medium5.1Vvveb before 1.0.8.2 contains an unauthenticated reflected cross-site scripting vulnerability in the visual editor preview renderer that allows attackers to execute ar…Check if you run itEPSS 0.34%May 7, 2026
- High7.6FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.Check if you run itEPSS 0.30%May 7, 2026
- Medium5.4A Cross-Site Scripting (XSS) vulnerability was found in PHPGurukal Hospital Management System v4.0 in the /hospital/hms/edit-profile.php page.Check if you run itEPSS 0.23%May 7, 2026
- Medium4.3Weblate is a web based localization tool.Check if you run itEPSS 0.37%May 7, 2026
- Critical9.8ChestnutCMS v1.5.10 has a SQL injection vulnerability.Check if you run itEPSS 0.50%May 7, 2026
- Medium6.5Admidio is an open-source user management solution.Check if you run itEPSS 0.31%May 7, 2026
- Medium6.1Postorius through 1.3.13 does not escape HTML in the message subject when rendering it in the Held messages pop-up, as exploited in the wild in May 2026.Patch nowKEVEPSS 0.33%May 7, 2026