Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.5GitHub Copilot CLI brings AI-powered coding assistance directly to your command line.Check if you run itEPSS 0.38%May 13, 2026
- High7.2nnU-Net is a semantic segmentation framework that automatically adapts its pipeline to a dataset.Check if you run itEPSS 0.29%May 12, 2026
- High8.8Improper neutralization of special elements in output used by a downstream component ('injection') in GitHub Copilot and Visual Studio allows an unauthorized attacker…Check if you run itEPSS 0.86%May 12, 2026
- Medium6.4WWBN AVideo is an open source video platform.Check if you run itEPSS 0.26%May 11, 2026
- Critical9.6TanStack Unspecified VulnerabilityPatch nowKEVEPSS 1.05%May 11, 2026
- High8.0Zen is a firefox-based browser.Check if you run itEPSS 0.27%May 11, 2026
- High8.8OWASP BLT is a QA testing and vulnerability disclosure platform that encompasses websites, apps, git repositories, and more.Check if you run itEPSS 0.46%May 11, 2026
- Medium6.5LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript.Check if you run itEPSS 0.59%May 9, 2026
- High7.0Gibbon versions before v30.0.01 are affected by an authenticated SQL Injection vulnerability by abusing the Tracking/graphing https://github.com/GibbonEdu/core/blob/c4…Check if you run itEPSS 0.38%May 9, 2026
- Critical9.8Postiz is an AI social media scheduling tool.Check if you run itEPSS 0.81%May 8, 2026
- High8.4PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.23%May 8, 2026
- Critical9.8electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client.Check if you run itEPSS 2.49%May 8, 2026
- Critical9.8electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client.Check if you run itEPSS 2.49%May 8, 2026
- Medium5.9A reflected HTML injection vulnerability was identified in the GitHub Enterprise Server Management Console login page that could allow credential theft.Check if you run itEPSS 0.26%May 7, 2026
- High7.9A server-side request forgery (SSRF) vulnerability was identified in the GitHub Enterprise Server notebook viewer that allowed an attacker to access internal services…Check if you run itEPSS 0.86%May 7, 2026
- Medium6.3A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to cause service disruption by sending crafted re…Check if you run itEPSS 0.66%May 7, 2026
- Medium6.3An authentication bypass vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to create a local user account, bypassing th…Check if you run itEPSS 0.41%May 7, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: kcm: fix zero-frag skb in frag_list on partial sendmsg error Syzkaller reported a warning in kcm_wr…Check if you run itEPSS 0.16%May 6, 2026
- Medium6.5Fiber is a web framework for Go.Check if you run itEPSS 0.37%May 5, 2026
- Medium5.5A security flaw has been discovered in YunaiV yudao-cloud up to 2026.01.Check if you run itEPSS 0.65%May 3, 2026
- Low2.1A vulnerability was identified in YunaiV yudao-cloud up to 2026.01.Check if you run itEPSS 0.32%May 3, 2026
- Unknownlfprojects mlflow Path Traversal: '\..\filename'Patch nowKEVEPSS 89.72%Apr 30, 2026
- Critical9.0Jenkins GitHub Plugin 1.46.0 and earlier improperly processes the current job URL as part of JavaScript implementing validation of the feature "GitHub hook trigger for…Check if you run itEPSS 0.50%Apr 29, 2026
- Medium4.3A missing permission check in Jenkins GitHub Branch Source Plugin 1967.vdea_d580c1a_b_a_ and earlier allows attackers with Overall/Read permission to connect to an att…Check if you run itEPSS 0.28%Apr 29, 2026
- Low1.9A security vulnerability has been detected in OSPG binwalk up to 2.4.3.Check if you run itEPSS 0.17%Apr 27, 2026