Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service.Check if you run itEPSS 0.55%May 8, 2026
- Critical9.1Axios is a promise based HTTP client for the browser and Node.js.Check if you run itEPSS 0.77%May 8, 2026
- Low2.0An Exposed IOCTL with Insufficient Access Control vulnerability in AsusPTPFilter allows a local user to bypass driver security mechanisms and obtain restricted touchpa…Check if you run itEPSS 0.12%May 8, 2026
- High7.9A server-side request forgery (SSRF) vulnerability was identified in the GitHub Enterprise Server notebook viewer that allowed an attacker to access internal services…Check if you run itEPSS 0.86%May 7, 2026
- Medium6.3A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to cause service disruption by sending crafted re…Check if you run itEPSS 0.66%May 7, 2026
- High8.1Server-side request forgery (ssrf) in Azure Notification Service allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.69%May 7, 2026
- Medium6.3In OpenStack Cyborg before 16.0.1, the Accelerator Request (ARQ) API does not enforce project ownership at any layer.Check if you run itEPSS 0.33%May 7, 2026
- High7.4OpenStack Cyborg before 16.0.1 uses rule:allow (check_str='@') as the default policy for multiple API endpoints.Check if you run itEPSS 0.33%May 7, 2026
- High8.5n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations.Check if you run itEPSS 0.33%May 7, 2026
- High8.6Inngest is a platform for running event-driven and scheduled background functions with queueing, retries, and step orchestration.Check if you run itEPSS 0.55%May 7, 2026
- Critical9.1Copilot said: i18nextify is a JavaScript library that adds i18nextify is a JavaScript library that adds website internationalization via a script tag, without source code changes.Check if you run itEPSS 0.31%May 7, 2026
- High8.7BerriAI LiteLLM Command Injection VulnerabilityPatch nowKEVEPSS 92.57%May 7, 2026
- Medium5.3ReverseProxy can forward queries containing parameters not visible to Rewrite functions.Check if you run itEPSS 0.41%May 7, 2026
- High7.1FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.Check if you run itEPSS 0.29%May 7, 2026
- Medium5.4FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.Check if you run itEPSS 0.36%May 7, 2026
- Low2.1A vulnerability has been found in router-for-me CLIProxyAPI 6.9.29.Check if you run itEPSS 0.39%May 7, 2026
- Medium6.0Wallos is an open-source, self-hostable personal subscription tracker.Check if you run itEPSS 0.27%May 7, 2026
- Medium6.9Uncontrolled Resource Consumption vulnerability in ericmj decimal allows unauthenticated remote Denial of Service.Check if you run itEPSS 0.34%May 7, 2026
- Medium6.5Cross-Site request forgery (CSRF) vulnerability in DivvyDrive Information Technologies Inc.Check if you run itEPSS 0.17%May 7, 2026
- High8.3monetr is a budgeting application for recurring expenses.Check if you run itEPSS 0.44%May 7, 2026
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in PluginUs.Net BEAR allows Cross Site Request Forgery.Check if you run itEPSS 0.14%May 7, 2026
- Medium5.4Cross-Site Request Forgery (CSRF) vulnerability in WPGraphQL allows Cross Site Request Forgery.Check if you run itEPSS 0.09%May 7, 2026
- High7.7Istio is an open platform to connect, manage, and secure microservices.Check if you run itEPSS 0.45%May 7, 2026
- Medium6.8Admidio is an open-source user management solution.Check if you run itEPSS 0.39%May 7, 2026
- Medium6.9CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Check if you run itEPSS 0.43%May 7, 2026