Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1WeGIA is a web manager for charitable institutions.Check if you run itEPSS 0.34%Oct 14, 2026
- High8.8WeGIA is a web manager for charitable institutions.Check if you run itEPSS 0.45%Oct 14, 2026
- Unknowncurl vulnerabilitiesOpen the advisoryOct 14, 2026
- Medium6.8InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates.Check if you run itEPSS 0.45%Oct 14, 2026
- High8.2InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates.Check if you run itEPSS 0.42%Oct 14, 2026
- Medium4.2LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g.Check if you run itEPSS 0.21%Oct 14, 2026
- High7.7Radius is a cloud-native, portable application platform that makes app development easier for teams building cloud-native apps.Check if you run itEPSS 0.34%Oct 14, 2026
- Medium5.3lamp-boot 4.16.0-java17 through 4.21.2-java17 contains an insecure direct object reference vulnerability in the oauth module's /anyone/findDeptByCompany endpoint that…Check if you run itEPSS 0.21%Oct 14, 2026
- Medium6.3bbPress before 2.6.19 contains an information disclosure vulnerability that allows unauthenticated visitors to view restricted subforum posts because hide_sitewide ign…Check if you run itEPSS 0.23%Oct 14, 2026
- High8.7ILIAS before 9.24, 10.12, and 11.5 contains a PHP object injection vulnerability that allows authenticated users with Test creation or import permission to deserialize…Check if you run itEPSS 0.57%Oct 14, 2026
- Medium6.0Insertion of sensitive information into log files in the git_utils[.]py component in Amazon SageMaker Python SDK V3 before 3.10.0 and V2 before 2.257.3 might allow an…Check if you run itEPSS 0.53%Oct 14, 2026
- Medium5.9Multiple TP-Link Wi-Fi range extenders use a custom, reversible XOR-and-dictionary transformation in the HTTP web-management login flow.Check if you run itEPSS 0.35%Oct 14, 2026
- High8.7DataEase is an open source data visualization and analysis tool.Check if you run itEPSS 0.26%Oct 14, 2026
- High8.7DataEase is an open source data visualization and analysis tool.Check if you run itEPSS 0.29%Oct 14, 2026
- High8.7DataEase is an open source data visualization and analysis tool.Check if you run itEPSS 0.28%Oct 14, 2026
- Low3.7cpp-httplib is a C++ header-only HTTP/HTTPS library.Check if you run itEPSS 0.37%Oct 14, 2026
- High7.5cpp-httplib is a C++ header-only HTTP/HTTPS library.Check if you run itEPSS 0.36%Oct 14, 2026
- Critical9.2Dgraph is an open source distributed GraphQL database.Check if you run itEPSS 0.49%Oct 14, 2026
- Medium5.6Pipecat is an open-source Python framework for building real-time voice and multimodal conversational agents.Check if you run itEPSS 0.23%Oct 14, 2026
- Medium6.9In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the vertx-mail-client does not sanitize CR (\r) or LF (\n) characters…Check if you run itEPSS 0.32%Oct 14, 2026
- High8.6Incorrect AuthorizationCheck if you run itEPSS 0.32%Oct 14, 2026
- High8.2dbt enables data analysts and engineers to transform their data using the same practices that software engineers use to build applications.Check if you run itEPSS 0.35%Oct 14, 2026
- Medium5.3Gogs is an open source self-hosted Git service.Check if you run itEPSS 0.34%Oct 14, 2026
- High7.1Nexent through 2.7.0 Cross-Tenant Knowledge-Base File Read via check_file_accessCheck if you run itEPSS 0.25%Oct 14, 2026
- Medium6.0Blinko through 1.8.8 Private Attachment Read via /api/file RouteCheck if you run itEPSS 0.24%Oct 14, 2026