Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.2dbt enables data analysts and engineers to transform their data using the same practices that software engineers use to build applications.Check if you run itEPSS 0.35%Oct 14, 2026
- Medium5.3Gogs is an open source self-hosted Git service.Check if you run itEPSS 0.34%Oct 14, 2026
- High7.1Nexent through 2.7.0 Cross-Tenant Knowledge-Base File Read via check_file_accessCheck if you run itEPSS 0.25%Oct 14, 2026
- Medium6.0Blinko through 1.8.8 Private Attachment Read via /api/file RouteCheck if you run itEPSS 0.24%Oct 14, 2026
- Medium5.3GrowChief through 0.3.0 Missing Authorization via /users/all-users EndpointCheck if you run itEPSS 0.21%Oct 14, 2026
- Medium5.3Sure 0.7.0 through 0.7.6-alpha.6 Missing Authorization via Transaction Bulk UpdateCheck if you run itEPSS 0.27%Oct 14, 2026
- Medium5.3Shopizer through 3.2.5 contains an authorization bypass vulnerability that allows authenticated customers to post reviews as other customers by supplying a customerId field.Check if you run itEPSS 0.22%Oct 14, 2026
- Critical9.2Databasus 3.7.0 through 3.61.0 Account Takeover via Password Reset Brute-ForceCheck if you run itEPSS 0.50%Oct 14, 2026
- High8.3holaOS through 2026.822.1 Missing Authorization in Channel-Gateway ConnectorsCheck if you run itEPSS 0.29%Oct 14, 2026
- Medium6.3holaOS through 2026.822.1 Authorization Bypass via Telegram Connector Username AllowlistCheck if you run itEPSS 0.22%Oct 14, 2026
- High8.7Gitingest through 0.3.1 Arbitrary File Read via Symlink in Blob IngestionCheck if you run itEPSS 0.41%Oct 14, 2026
- Medium5.3Colanode Server through 0.4.7 Path Traversal via Avatar Download RouteCheck if you run itEPSS 0.29%Oct 14, 2026
- High8.2FlexPrice through 2.1.38 contains an authentication bypass vulnerability in HandleQuickBooksWebhook that skips signature verification when the intuit-signature header is omitted.Check if you run itEPSS 0.22%Oct 14, 2026
- Medium6.0AstronRPA through 1.1.6 Cross-Tenant File Disclosure via /file/downloadCheck if you run itEPSS 0.24%Oct 14, 2026
- Low2.2Dell OS Recovery Tool, versions prior to 2.4.4, contains an Insecure Storage of Sensitive Information vulnerability.Check if you run itEPSS 0.11%Oct 14, 2026
- UnknownCVE-2026-16756 - Allocation of resources without limits in the default aws-smithy-http-server serve() path allows unauthenticated Slowloris denial of serviceCheck if you run itEPSS 0.75%Oct 14, 2026
- UnknownCVE-2026-16318Check if you run itEPSS 0.53%Oct 14, 2026
- UnknownCVE-2026-16317Check if you run itEPSS 0.25%Oct 14, 2026
- UnknownCVE-2026-15746 - Credential disclosure in Strands Agents Tools elasticsearch_memory toolCheck if you run itEPSS 0.42%Oct 14, 2026
- UnknownCVE-2026-13763Check if you run itEPSS 0.68%Oct 14, 2026
- UnknownCVE-2026-13762Check if you run itEPSS 0.63%Oct 14, 2026
- UnknownIBM security advisory (AV26-1040)Check if you run itEPSS 0.40%Oct 14, 2026
- High8.8Mongoose is an embedded web server and network library.Check if you run itEPSS 0.24%Oct 14, 2026
- High7.5Mongoose is an embedded web server and network library.Check if you run itEPSS 0.35%Oct 14, 2026
- High7.5Mongoose is an embedded web server and network library.Check if you run itEPSS 0.23%Oct 14, 2026