Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.4BigBlueButton is an open-source virtual classroom.Check if you run itEPSS 0.29%Feb 21, 2026
- Critical9.2ASN.1 TypeScript ESM library, including codecs for Basic Encoding Rules (BER) and Distinguished Encoding Rules (DER).Check if you run itEPSS 0.35%Feb 21, 2026
- Medium5.5A vulnerability was detected in Foswiki up to 2.1.10.Check if you run itEPSS 0.76%Feb 21, 2026
- High8.2Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript.Check if you run itEPSS 0.42%Feb 21, 2026
- High8.7GetSimple CMS is a content management system.Check if you run itEPSS 0.48%Feb 21, 2026
- Medium5.3Certain Samsung MultiXpress Multifunction Printers may be vulnerable to information disclosure, potentially exposing address book entries and other device configuratio…Check if you run itEPSS 0.24%Feb 20, 2026
- Low2.7Windmill is an open-source developer platform for internal code: APIs, background jobs, workflows and UIs.Check if you run itEPSS 0.46%Feb 20, 2026
- Medium5.9Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor VulnerabilityPatch nowKEVEPSS 29.50%Feb 10, 2026
- Medium5.5Microsoft Windows Information Disclosure VulnerabilityPatch nowKEVEPSS 7.46%Jan 13, 2026
- High8.7Form.io is a combined Form and API platform for Serverless applications.Check if you run itEPSS 0.31%Dec 11, 2025
- Low3.6The CNI portmap plugin allows containers to emulate opening a host port, forwarding that traffic to the container.Check if you run itEPSS 0.14%Dec 10, 2025
- Medium4.9Umbraco is an ASP.NET CMS.Check if you run itEPSS 0.36%Dec 9, 2025
- Medium5.5A vulnerability was detected in Verysync 微力同步 2.21.3.Check if you run itEPSS 0.46%Dec 7, 2025
- High7.4The web interface of the Silicon Labs Simplicity Device Manager is exposed publicly and can be used to extract the NTLMv2 hash which an attacker could use to crack the…Open the advisoryDec 4, 2025
- High7.5Vite Vitejs Improper Access Control VulnerabilityPatch nowKEVEPSS 65.19%Mar 31, 2025
- High8.6Check Point Quantum Security Gateways Information Disclosure VulnerabilityPatch nowKEVEPSS 99.98%May 27, 2024
- High7.5ownCloud graphapi Information Disclosure VulnerabilityPatch nowKEVEPSS 78.43%Nov 21, 2023
- Medium5.5Android Pixel Information Disclosure VulnerabilityPatch nowKEVEPSS 0.27%Jun 13, 2023
- High7.5MinIO Information Disclosure VulnerabilityPatch nowKEVEPSS 83.96%Mar 22, 2023
- Critical9.8When doing HTTP(S) transfers, libcurl might erroneously use the read callback ( ) to ask for data to send, even when the option has been set, if the same handle previo…Check if you run itEPSS 5.09%Dec 5, 2022
- Critical9.8CVE-2020-35167 is listed by Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Ti…Check if you run itEPSS 1.02%Jul 11, 2022
- High7.5An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a differe…Check if you run itEPSS 3.34%Jun 2, 2022
- Medium6.5Cisco IOS XR Open Port VulnerabilityPatch nowKEVEPSS 11.47%May 20, 2022
- High7.5Metabase GeoJSON API Local File Inclusion VulnerabilityPatch nowKEVEPSS 97.18%Nov 17, 2021
- Medium5.3curl supports the command line option, known as in libcurl.Check if you run itEPSS 5.37%Aug 5, 2021