Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5In jump_to_payload of payload.rs, there is a possible information disclosure due to a logic error in the code.Check if you run itEPSS 0.10%Mar 2, 2026
- High7.7In multiple functions of TaskFragmentOrganizerController.java, there is a possible activity token leak due to a logic error in the code.Check if you run itEPSS 0.11%Mar 2, 2026
- Medium6.5ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI.Check if you run itEPSS 0.24%Mar 2, 2026
- Medium6.9wpForo Forum 2.4.14 contains an information disclosure vulnerability that allows unauthenticated users to retrieve private and unapproved forum topics via the global R…Check if you run itEPSS 0.49%Feb 28, 2026
- Medium4.7Gradio is an open-source Python package designed for quick prototyping.Check if you run itEPSS 0.30%Feb 27, 2026
- Medium6.7A flaw was found in the Red Hat Ansible Automation Platform, Event-Driven Ansible (EDA) Event Streams.Check if you run itEPSS 0.21%Feb 27, 2026
- Medium6.7A flaw was found in the Red Hat Ansible Automation Platform, Event-Driven Ansible (EDA) Event Stream API.Check if you run itEPSS 0.17%Feb 27, 2026
- Medium6.0Exposure of Sensitive Information to an Unauthorized Actor vulnerability in EFM-Networks, Inc.Check if you run itEPSS 0.41%Feb 27, 2026
- High7.5Initiative is a self-hosted project management platform.Check if you run itEPSS 0.56%Feb 26, 2026
- Critical9.8EverShop is a TypeScript-first eCommerce platform.Check if you run itEPSS 0.54%Feb 26, 2026
- Medium4.3Weblate is a web based localization tool.Check if you run itEPSS 0.43%Feb 26, 2026
- Medium4.9Discourse is an open source discussion platform.Check if you run itEPSS 0.41%Feb 26, 2026
- High8.4A vulnerability in Google Cloud Vertex AI Workbench from 7/21/2025 to 01/30/2026 allows an attacker to exfiltrate valid Google Cloud access tokens of other users via a…Check if you run itEPSS 0.24%Feb 26, 2026
- Medium5.7OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.28%Feb 25, 2026
- High7.5Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor VulnerabilityPatch nowKEVEPSS 32.43%Feb 25, 2026
- High7.1FileBrowser Quantum is a free, self-hosted, web-based file manager.Check if you run itEPSS 0.44%Feb 25, 2026
- Medium4.5OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.23%Feb 25, 2026
- Medium6.5Improper access control in multiple DVLS REST API endpoints in Devolutions Server 2025.3.14.0 and earlier allows an authenticated user with view-only permission to acc…Check if you run itEPSS 0.40%Feb 24, 2026
- High7.5Information disclosure, mitigation bypass in the Settings UI component.Check if you run itEPSS 0.46%Feb 24, 2026
- High7.5Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component.Check if you run itEPSS 0.42%Feb 24, 2026
- Low2.3A Sensitive Data Exposure vulnerability exists in Apache Superset allowing authenticated users to retrieve sensitive user information.Check if you run itEPSS 0.42%Feb 24, 2026
- Low2.1A weakness has been identified in FastApiAdmin up to 2.2.0.Check if you run itEPSS 0.51%Feb 23, 2026
- Medium5.5A security flaw has been discovered in FastApiAdmin up to 2.2.0.Check if you run itEPSS 0.65%Feb 23, 2026
- Medium5.5A vulnerability was identified in funadmin up to 7.1.0-rc4.Check if you run itEPSS 0.74%Feb 21, 2026
- Low2.4BigBlueButton is an open-source virtual classroom.Check if you run itEPSS 0.29%Feb 21, 2026