Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.Check if you run itEPSS 0.27%Apr 4, 2026
- Medium6.1OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.Check if you run itEPSS 0.34%Apr 3, 2026
- High8.7RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine.Check if you run itEPSS 0.56%Apr 3, 2026
- High8.7Hirschmann HiOS devices versions prior to 08.1.00 and 07.1.01 contain a denial of service vulnerability in the EtherNet/IP stack where improper handling of packet leng…Check if you run itEPSS 0.92%Apr 3, 2026
- Low1.1A vulnerability has been found in NASA cFS up to 7.0.0.Check if you run itEPSS 0.36%Apr 3, 2026
- Low2.7Ella Core is a 5G core designed for private networks.Check if you run itEPSS 0.31%Apr 2, 2026
- High7.1vLLM is an inference and serving engine for large language models (LLMs).Check if you run itEPSS 0.48%Apr 2, 2026
- Low2.1Signal K Server is a server application that runs on a central hub in a boat.Check if you run itEPSS 0.41%Apr 2, 2026
- Medium5.4phpMyFAQ is an open source FAQ web application.Check if you run itEPSS 0.30%Apr 2, 2026
- High7.8SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to bypass subject sanitization and forge security tags using Unicode lookalike characters.Check if you run itEPSS 0.35%Apr 2, 2026
- High7.8SEPPmail Secure Email Gateway before version 15.0.3 does not properly authenticate the inner message of S/MIME-encrypted MIME entities, allowing an attacker to control…Check if you run itEPSS 0.43%Apr 2, 2026
- High7.7SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to bypass subject sanitization and forge tags such as [signed OK].Check if you run itEPSS 0.35%Apr 2, 2026
- Medium5.3SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to hide security tags from users by crafting a long subject.Check if you run itEPSS 0.31%Apr 2, 2026
- Medium5.3SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to craft a password-tag that bypasses subject sanitization.Check if you run itEPSS 0.42%Apr 2, 2026
- Medium5.3SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to upload PGP keys with UIDs that do not match their email address.Check if you run itEPSS 0.40%Apr 2, 2026
- Medium6.3AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.Check if you run itEPSS 0.39%Apr 1, 2026
- High8.6Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability.Check if you run itEPSS 0.51%Apr 1, 2026
- Medium6.5A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to execute arbitrary code…Check if you run itEPSS 0.39%Apr 1, 2026
- Critical9.8A vulnerability in the change password functionality of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to bypass authenti…Check if you run itEPSS 0.99%Apr 1, 2026
- Medium6.5A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to the lack of proper input validation.Check if you run itEPSS 0.48%Apr 1, 2026
- Medium6.1FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.Check if you run itEPSS 0.32%Mar 31, 2026
- Low3.8A vulnerability exists in the SonicWall Email Security appliance due to improper input sanitization that may lead to data corruption, allowing a remote authenticated a…Check if you run itEPSS 0.41%Mar 31, 2026
- Low2.7A denial-of-service (DoS) vulnerability exists due to improper input validation in the SonicWall Email Security appliance, allowing a remote authenticated attacker as…Check if you run itEPSS 0.47%Mar 31, 2026
- Low3.5Admidio is an open-source user management solution.Check if you run itEPSS 0.15%Mar 31, 2026
- High8.3Cato Networks’ Socket versions prior to 25 contain a command injection vulnerability that allows an authenticated attacker with access to the Socket web interface (UI)…Check if you run itEPSS 0.98%Mar 31, 2026