Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4Scoold is a Q&A and a knowledge sharing platform for teams.Check if you run itEPSS 0.11%Oct 15, 2026
- Medium5.4Scoold is a Q&A and a knowledge sharing platform for teams.Check if you run itEPSS 0.26%Oct 15, 2026
- High8.1AliasVault is a privacy-first password manager with built-in email aliasing.Check if you run itEPSS 0.15%Oct 15, 2026
- Critical9.1Tianji is an open source analytics, uptime monitoring, and server status platform.Check if you run itEPSS 0.58%Oct 15, 2026
- High8.8Tianji is an open source analytics, uptime monitoring, and server status platform.Check if you run itEPSS 0.34%Oct 15, 2026
- Critical9.3runwasi facilitates running Wasm and WASI workloads managed by containerd.Check if you run itEPSS 0.39%Oct 15, 2026
- Critical9.1An authorization bypass vulnerability exists in the REST API of multiple versions of OpenNMS Meridian and Horizon.Check if you run itEPSS 0.38%Oct 15, 2026
- High8.2SimplePie through 1.9.0 contains a local file read vulnerability that allows malicious feed servers to read server files by supplying file:// URLs in redirects or auto…Check if you run itEPSS 0.31%Oct 15, 2026
- Low2.3Netgate pfSense CE 2.7.1 through 2.9.0 contains a reflected cross-site scripting vulnerability in firewall_rules.php that allows remote attackers to inject script via…Check if you run itEPSS 0.48%Oct 15, 2026
- Medium4.8Netgate pfSense CE 2.3.0 through 2.9.0 contains a stored cross-site scripting vulnerability that allows authenticated users with Firewall: Rules or NAT: Port Forward p…Check if you run itEPSS 0.40%Oct 15, 2026
- High8.6Netgate pfSense CE through 2.9.0 contains an authorization bypass vulnerability that allows read-only WebGUI users to replace config.xml because config_restore() and c…Check if you run itEPSS 0.92%Oct 15, 2026
- Medium6.9Netgate pfSense CE through 2.9.0 contains a local file read vulnerability that allows users with the Dynamic DNS client privilege to read files as root by setting a fi…Check if you run itEPSS 0.84%Oct 15, 2026
- High8.6pfSense CE 2.7.0 through 2.9.0 contains a command injection vulnerability in services_captiveportal_hasync.php that allows users with only the Captive Portal HA privil…Check if you run itEPSS 6.37%Oct 15, 2026
- Medium5.1Netgate pfSense CE from 2.7.1 through 2.9.0 contains a CRLF injection vulnerability in services_unbound_advanced.php that allows authenticated users with DNS Resolver:…Check if you run itEPSS 0.81%Oct 15, 2026
- Medium5.1Netgate pfSense CE through 2.9.0 contains a CRLF injection vulnerability in services_unbound_acls.php that allows authenticated users with the DNS Resolver: Access Lis…Check if you run itEPSS 0.81%Oct 15, 2026
- High8.6pfSense CE 2.4.5 through 2.9.0 contains an OS command injection vulnerability that allows authenticated WebGUI users with Advanced Admin Access privilege to execute co…Check if you run itEPSS 6.55%Oct 15, 2026
- Low2.3Netgate pfSense CE 2.5.0 through 2.9.0 contains an OS command injection vulnerability in openvpn.learn-address.sh that allows authenticated VPN clients to execute comm…Check if you run itEPSS 2.68%Oct 15, 2026
- High7.7pfSense CE through 2.9.0 contains an OS command injection vulnerability in the OpenVPN openvpn.connect_async.sh script that allows authenticated VPN users to execute c…Check if you run itEPSS 5.37%Oct 15, 2026
- High8.6Netgate pfSense CE 2.7.0 through 2.9.0 contains a configuration injection vulnerability that allows authenticated users with IPsec Mobile privileges to execute command…Check if you run itEPSS 0.76%Oct 15, 2026
- High7.5Netgate pfSense CE through 2.9.0 contains a php.ini injection vulnerability that allows authenticated users with General Setup privileges to inject directives by submi…Check if you run itEPSS 0.98%Oct 15, 2026
- High7.5Netgate pfSense CE through 2.9.0 contains a configuration injection vulnerability that allows authenticated WebGUI users to inject mpd5 commands by submitting an unesc…Check if you run itEPSS 0.95%Oct 15, 2026
- High8.6pfSense CE through 2.9.0 contains a crontab injection vulnerability in interfaces_ppps_edit.php that allows authenticated users to execute commands as root by injectin…Check if you run itEPSS 0.73%Oct 15, 2026
- High7.5Netgate pfSense CE through 2.9.0 contains a newline injection vulnerability in services_pppoe_edit.php that allows privileged users to inject mpd.secret entries via un…Check if you run itEPSS 0.89%Oct 15, 2026
- High8.6Netgate pfSense CE 2.7.0 through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with Traffic Shaper Limiters privileges to execut…Check if you run itEPSS 8.45%Oct 15, 2026
- High8.6Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with Virtual IP edit privileges to execute commands as…Check if you run itEPSS 7.05%Oct 15, 2026