Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1Scoold is a Q&A and a knowledge sharing platform for teams.Check if you run itEPSS 0.23%Oct 15, 2026
- High8.7GYM One is open-source gym management software for fitness centers, personal trainers, and sports clubs.Check if you run itEPSS 0.23%Oct 15, 2026
- Medium6.5GYM One is open-source gym management software for fitness centers, personal trainers, and sports clubs.Check if you run itEPSS 0.34%Oct 15, 2026
- Medium6.3AliasVault is a privacy-first password manager with built-in email aliasing.Check if you run itEPSS 0.19%Oct 15, 2026
- UnknownCVE-2026-61702 affecting package cups 2.4.19-1Open the advisoryOct 15, 2026
- UnknownCVE-2026-55467 affecting package cups 2.4.19-1Open the advisoryOct 15, 2026
- Medium4.3Missing Authorization vulnerability in Meow Apps AI Engine ai-engine allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Engi…Check if you run itEPSS 0.18%Oct 15, 2026
- Medium5.4XXL-JOB <=3.5.0-SNAPSHOT contains a stored Cross-Site Scripting (XSS) vulnerability in the job log list page (/joblog).Check if you run itEPSS 0.17%Oct 15, 2026
- High7.5libp2p is a JavaScript implementation of the libp2p networking stack.Check if you run itEPSS 0.52%Oct 15, 2026
- Medium6.3ammonia is a Rust library for repairing and securing untrusted HTML.Check if you run itEPSS 0.55%Oct 15, 2026
- Medium5.3NL Portal Backend Libraries provide backend components for Dutch government portals that interact with residents, customers, suppliers, and partner organizations.Check if you run itEPSS 0.44%Oct 15, 2026
- Medium4.3Helium is a free online student planner for classes, homework, grades, and notes.Check if you run itEPSS 0.21%Oct 15, 2026
- Low3.5Helium is a free online student planner for classes, homework, grades, and notes.Check if you run itEPSS 0.15%Oct 15, 2026
- High8.8A flaw was found in the ContentRepositoryImpl.copyExplodedContent function of the wildfly-core library, which is used by WildFly and JBoss EAP to manage server deployments.Check if you run itEPSS 0.41%Oct 15, 2026
- Medium6.5Directory Traversal vulnerability in Grav CMS 2.0.3 through 2.0.6 allows a remote attacker to obtain sensitive information via the GravExtension.php and the mediaDirFunc method.Check if you run itEPSS 1.12%Oct 15, 2026
- Medium5.0An issue in Matomo v.5.11.2 allows a remote attacker to obtain sensitive information via the SiteContentDetector / SitesManager componentCheck if you run itEPSS 0.30%Oct 15, 2026
- High8.3Lychee is a free, open-source photo-management tool.Check if you run itEPSS 0.45%Oct 15, 2026
- Medium6.9Lychee is a free, open-source photo-management tool.Check if you run itEPSS 0.37%Oct 15, 2026
- High7.1Lychee is a free, open-source photo-management tool.Check if you run itEPSS 0.27%Oct 15, 2026
- High8.3Lychee is a free, open-source photo-management tool.Check if you run itEPSS 0.44%Oct 15, 2026
- High8.9Lychee is a free, open-source photo-management tool.Check if you run itEPSS 0.35%Oct 15, 2026
- High7.5Lychee is a free, open-source photo-management tool.Check if you run itEPSS 0.35%Oct 15, 2026
- Low2.3Lychee is a free, open-source photo-management tool.Check if you run itEPSS 0.24%Oct 15, 2026
- Medium5.7Lychee is a free, open-source photo-management tool.Check if you run itEPSS 0.28%Oct 15, 2026
- Medium5.9In authd before 0.7.1, the user identity matching in UpdateUser (internal/users/manager.go) resolves an incoming login by the broker-scoped provider ID, but falls back…Check if you run itEPSS 0.11%Oct 15, 2026