Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8A DLL hijacking vulnerability in Wassimulator (GitHub) CactusViewer v2.3.0 allows attackers to escalate privileges and execute arbitrary code via a crafted DLL.Check if you run itEPSS 0.20%Jun 3, 2026
- Critical10.0CloudPirates Open Source Helm Charts is a collection of Helm charts.Check if you run itEPSS 0.44%Jun 1, 2026
- Critical10.0CloudPirates Open Source Helm Charts is a collection of Helm charts.Check if you run itEPSS 0.44%Jun 1, 2026
- Low2.1A vulnerability was detected in TaleLin lin-cms-spring-boot up to 0.2.1.Check if you run itEPSS 0.21%May 30, 2026
- Medium5.1A vulnerability was found in macrozheng mall up to 1.0.3.Check if you run itEPSS 0.22%May 29, 2026
- Critical9.1GitHub CLI (gh) is GitHub’s official command line tool.Check if you run itEPSS 0.45%May 29, 2026
- High8.2Espressif Shared GitHub DangerJS is a reusable GitHub Action CI DangerJS workflow for Espressif GitHub projects.Check if you run itEPSS 0.32%May 28, 2026
- Medium4.3A cross-site request forgery (CSRF) vulnerability in Jenkins GitHub Integration Plugin 0.7.3 and earlier allows attackers to attackers to trigger a build for a pull request.Check if you run itEPSS 0.14%May 27, 2026
- Critical9.9Vowpal Wabbit is a machine learning system.Check if you run itEPSS 0.58%May 26, 2026
- Low2.1A weakness has been identified in blitz-js blitz up to 3.0.2 on GitHub.Check if you run itEPSS 0.45%May 26, 2026
- Medium5.4Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to validate the OAuth token scope on the callback which allows an au…Check if you run itEPSS 0.23%May 22, 2026
- Medium6.3Concrete CMS 9.5.0 and below is vulnerable to IDOR in surveys.Check if you run itEPSS 0.32%May 21, 2026
- High7.5Concrete CMS 9.5.0 and below emits a CSRF token in the local_available_update.php view ($token->output('do_update')) but the corresponding do_update() method in concre…Check if you run itEPSS 0.19%May 21, 2026
- High7.5Concrete CMS 9.5.0 and below does not validate a CSRF token before processing requests to /dashboard/extend/update/prepare_remote_upgrade/ .Check if you run itEPSS 0.26%May 21, 2026
- High7.5Concrete CMS 9.5.0 and below contains a CSRF vulnerability in the install_package() method of concrete/controllers/single_page/dashboard/extend/install.php.Check if you run itEPSS 0.26%May 21, 2026
- High7.5Concrete CMS 9.5.0 and below does not validate a CSRF token before processing requests to /dashboard/extend/update/do_update/ .Check if you run itEPSS 0.19%May 21, 2026
- High7.5Concrete CMS 9.5.0 and below does not validate a CSRF token before processing requests to /dashboard/extend/install/download/ .Check if you run itEPSS 0.16%May 21, 2026
- High8.9Concrete CMS 9.5.0 and below is vulnerable to Remote Code Execution due to insecure deserialization occurring in the ExpressEntryList block controller.Check if you run itEPSS 0.74%May 21, 2026
- Low1.3A vulnerability has been found in vercel ai up to 3.0.97.Check if you run itEPSS 6.97%May 17, 2026
- Medium5.4Gitsign is a keyless Sigstore to signing tool for Git commits with your a GitHub / OIDC identity.Check if you run itEPSS 0.17%May 15, 2026
- Medium5.3Gitsign is a keyless Sigstore to signing tool for Git commits with your a GitHub / OIDC identity.Check if you run itEPSS 0.16%May 15, 2026
- Low3.5is GitHub’s official command line tool.Check if you run itEPSS 0.31%May 15, 2026
- Low2.1The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers.Check if you run itEPSS 0.27%May 14, 2026
- Low3.5The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers.Check if you run itEPSS 0.25%May 14, 2026
- Medium5.1The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers.Check if you run itEPSS 0.24%May 14, 2026