Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.3A weakness has been identified in ThingsBoard up to 4.3.1.1.Check if you run itEPSS 0.35%May 26, 2026
- Critical9.8IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5, 9.0 IBM WebSphere Application Server and WebSphere Application Server Liberty are v…Check if you run itEPSS 0.94%May 26, 2026
- High7.5IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5, 9.0 IBM WebSphere Application Server and WebSphere Application Server Liberty are v…Check if you run itEPSS 0.37%May 26, 2026
- Critical9.3Kavita is a cross platform reading server.Check if you run itEPSS 0.22%May 26, 2026
- Medium4.3The SAP Gateway allows attackers to inject content into error messages, potentially leading to disclosure of request artefacts (e.g., regex patterns) and revealing und…Check if you run itEPSS 0.32%May 26, 2026
- High7.4FastNetMon Community Edition through 1.2.9 does not verify TLS certificates on outbound HTTPS connections.Check if you run itEPSS 0.27%May 26, 2026
- High8.2Algernon is a small self-contained pure-Go web server.Check if you run itEPSS 0.50%May 26, 2026
- Low3.1Bugsink is a self-hosted error tracking tool.Check if you run itEPSS 0.23%May 26, 2026
- High7.5Algernon is a small self-contained pure-Go web server.Check if you run itEPSS 0.42%May 26, 2026
- Critical9.0Algernon is a small self-contained pure-Go web server.Check if you run itEPSS 0.74%May 26, 2026
- Critical9.9Vowpal Wabbit is a machine learning system.Check if you run itEPSS 0.58%May 26, 2026
- Medium4.3Bugsink is a self-hosted error tracking tool.Check if you run itEPSS 0.39%May 26, 2026
- High8.2Algernon is a small self-contained pure-Go web server.Check if you run itEPSS 0.28%May 26, 2026
- Critical9.2A vulnerability in the Google Cloud Apigee SetIntegrationRequest policy allowed remote attackers to perform Server-Side Request Forgery (SSRF) and exfiltrate service a…Check if you run itEPSS 0.36%May 26, 2026
- Medium5.4IBM webMethods Integration (on prem) -Integration Server 10.15 through IS_10.15_Core_Fix2611.1 to IS_11.1_Core_Fix10 IBM webMethods Integration is vulnerable to server…Check if you run itEPSS 0.18%May 26, 2026
- Medium6.5e107 is a content management system (CMS).Check if you run itEPSS 0.17%May 26, 2026
- Medium6.5e107 is a content management system (CMS).Check if you run itEPSS 0.31%May 26, 2026
- Medium6.5Files or Directories Accessible to External Parties, Server-Side Request Forgery (SSRF) vulnerability in Apache Flink Kubernetes Operator.Check if you run itEPSS 0.49%May 26, 2026
- High7.6Karakeep is a elf-hostable bookmark-everything app.Check if you run itEPSS 0.38%May 26, 2026
- Medium5.5A vulnerability was identified in vllm-project vllm 0.19.0.Check if you run itEPSS 0.72%May 26, 2026
- Medium5.7Zohocorp Zoho Mail wordpress plugin is vulnerable to Cross-Site request forgery (CSRF).Check if you run itEPSS 0.68%May 26, 2026
- Medium5.3A Check Point HTTP-based service can incorrectly handle malformed HTTP requests.Check if you run itEPSS 0.40%May 26, 2026
- High8.7The affected products perform improper length checking when parsing incoming HTTP requests, resulting in a size-limited out-of-bounds write.Check if you run itEPSS 0.57%May 26, 2026
- Medium6.5A missing authorization vulnerability in Zyxel GS1200-5v3 firmware versions through 1.00(ACPS.2)C0, GS1200-8v3 firmware versions through 1.00(ACPT.2)C0, GS1200-5HPv3 f…Check if you run itEPSS 0.30%May 26, 2026
- Medium6.5Kludex Starlette HTTP Request/Response Smuggling VulnerabilityPatch nowKEVEPSS 7.06%May 26, 2026