Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5Caddy is an extensible server platform that uses TLS by default.EPSS 0.5%Mar 7, 2026
- Medium5.3mcp-memory-service is an open-source memory backend for multi-agent systems.EPSS 0.4%Mar 7, 2026
- High7.5UptimeFlare is a serverless uptime monitoring & status page solution, powered by Cloudflare Workers.EPSS 0.5%Mar 7, 2026
- Medium5.3Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations.EPSS 0.4%Mar 7, 2026
- High7.5Homarr is an open-source dashboard.EPSS 1.2%Mar 7, 2026
- High7.5Plane is an an open-source project management tool.EPSS 0.4%Mar 6, 2026
- Medium4.3OliveTin gives access to predefined shell commands from a web interface.EPSS 0.5%Mar 6, 2026
- Critical9.3Wekan is an open source kanban tool built with Meteor.EPSS 0.4%Mar 6, 2026
- High8.7Wekan is an open source kanban tool built with Meteor.EPSS 0.6%Mar 6, 2026
- Medium6.9Wekan is an open source kanban tool built with Meteor.EPSS 0.5%Mar 6, 2026
- Medium6.4Gokapi is a self-hosted file sharing server with automatic expiration and encryption support.EPSS 0.2%Mar 6, 2026
- Medium5.3OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI.EPSS 0.4%Mar 6, 2026
- Medium5.3The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 12.8.3 vi…EPSS 0.4%Mar 6, 2026
- High7.1File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files.EPSS 0.5%Mar 5, 2026
- Low3.4Dark Reader is an accessibility browser extension that makes web pages colors dark.EPSS 0.1%Mar 4, 2026
- Medium5.3cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.EPSS 0.4%Mar 4, 2026
- Medium6.5The Seraphinite Accelerator plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.28.14 via the AJAX action with .EPSS 0.4%Mar 4, 2026
- Medium6.9SEPPmail Secure Email Gateway before version 15.0.1 decrypts inline PGP messages without isolating them from surrounding unencrypted content, allowing exposure of sens…EPSS 0.4%Mar 4, 2026
- High7.5Exposure of Sensitive Information to an Unauthorized ActorKEVEPSS 1.5%Mar 4, 2026
- Medium5.3The WPBookit plugin for WordPress is vulnerable to unauthorized data disclosure due to a missing authorization check on the 'get_customer_list' route in all versions u…EPSS 0.8%Mar 4, 2026
- High8.1OpenEMR is a free and open source electronic health records and medical practice management application.EPSS 0.5%Mar 3, 2026
- High8.4In hasImage of Notification.java, there is a possible way to reveal information across users due to a permissions bypass.EPSS 0.1%Mar 2, 2026
- Medium6.2In onServiceDisconnected of KeyguardServiceDelegate.java, there is a possible partial bypass of app pinning allowing limited interaction with other apps without knowin…EPSS 0.1%Mar 2, 2026
- Medium5.5In jump_to_payload of payload.rs, there is a possible information disclosure due to a logic error in the code.EPSS 0.1%Mar 2, 2026
- High7.7In multiple functions of TaskFragmentOrganizerController.java, there is a possible activity token leak due to a logic error in the code.EPSS 0.1%Mar 2, 2026