Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.6Pipecat is an open-source Python framework for building real-time voice and multimodal conversational agents.Check if you run itEPSS 0.23%Oct 14, 2026
- High8.7HTTP Request SmugglingCheck if you run itEPSS 0.27%Oct 14, 2026
- Medium6.9In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the vertx-mail-client does not sanitize CR (\r) or LF (\n) characters…Check if you run itEPSS 0.32%Oct 14, 2026
- High8.6Incorrect AuthorizationCheck if you run itEPSS 0.32%Oct 14, 2026
- Medium6.8BentoPDF is a privacy-focused PDF toolkit that runs in the browser.Check if you run itEPSS 0.20%Oct 14, 2026
- High8.2dbt enables data analysts and engineers to transform their data using the same practices that software engineers use to build applications.Check if you run itEPSS 0.35%Oct 14, 2026
- Medium5.3Gogs is an open source self-hosted Git service.Check if you run itEPSS 0.34%Oct 14, 2026
- High7.1Nexent through 2.7.0 Cross-Tenant Knowledge-Base File Read via check_file_accessCheck if you run itEPSS 0.25%Oct 14, 2026
- Medium6.0Blinko through 1.8.8 Private Attachment Read via /api/file RouteCheck if you run itEPSS 0.24%Oct 14, 2026
- Medium5.3GrowChief through 0.3.0 Missing Authorization via /users/all-users EndpointCheck if you run itEPSS 0.21%Oct 14, 2026
- Medium5.3Sure 0.7.0 through 0.7.6-alpha.6 Missing Authorization via Transaction Bulk UpdateCheck if you run itEPSS 0.27%Oct 14, 2026
- Medium5.3Shopizer through 3.2.5 contains an authorization bypass vulnerability that allows authenticated customers to post reviews as other customers by supplying a customerId field.Check if you run itEPSS 0.22%Oct 14, 2026
- Critical9.2Databasus 3.7.0 through 3.61.0 Account Takeover via Password Reset Brute-ForceCheck if you run itEPSS 0.50%Oct 14, 2026
- High8.3holaOS through 2026.822.1 Missing Authorization in Channel-Gateway ConnectorsCheck if you run itEPSS 0.29%Oct 14, 2026
- Medium6.3holaOS through 2026.822.1 Authorization Bypass via Telegram Connector Username AllowlistCheck if you run itEPSS 0.22%Oct 14, 2026
- High8.7Gitingest through 0.3.1 Arbitrary File Read via Symlink in Blob IngestionCheck if you run itEPSS 0.41%Oct 14, 2026
- Medium5.3Colanode Server through 0.4.7 Path Traversal via Avatar Download RouteCheck if you run itEPSS 0.29%Oct 14, 2026
- High8.2FlexPrice through 2.1.38 contains an authentication bypass vulnerability in HandleQuickBooksWebhook that skips signature verification when the intuit-signature header is omitted.Check if you run itEPSS 0.22%Oct 14, 2026
- Medium6.0AstronRPA through 1.1.6 Cross-Tenant File Disclosure via /file/downloadCheck if you run itEPSS 0.24%Oct 14, 2026
- Low2.2Dell OS Recovery Tool, versions prior to 2.4.4, contains an Insecure Storage of Sensitive Information vulnerability.Check if you run itEPSS 0.11%Oct 14, 2026
- UnknownCVE-2026-16756 - Allocation of resources without limits in the default aws-smithy-http-server serve() path allows unauthenticated Slowloris denial of serviceCheck if you run itEPSS 0.75%Oct 14, 2026
- UnknownCVE-2026-16318Check if you run itEPSS 0.53%Oct 14, 2026
- UnknownCVE-2026-16317Check if you run itEPSS 0.25%Oct 14, 2026
- UnknownCVE-2026-15746 - Credential disclosure in Strands Agents Tools elasticsearch_memory toolCheck if you run itEPSS 0.42%Oct 14, 2026
- UnknownCVE-2026-13763Check if you run itEPSS 0.68%Oct 14, 2026