Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Admidio is an open-source user management solution.Check if you run itEPSS 0.37%Mar 10, 2026
- High8.6OneUptime is a solution for monitoring and managing online services.Check if you run itEPSS 0.22%Mar 10, 2026
- Medium5.5WWBN AVideo is an open source video platform.Check if you run itEPSS 0.44%Mar 10, 2026
- Low2.3Misskey is an open source, federated social media platform.Check if you run itEPSS 0.28%Mar 10, 2026
- High7.5FreshRSS is a free, self-hostable RSS aggregator.Check if you run itEPSS 0.39%Mar 9, 2026
- Medium5.3WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval.Check if you run itEPSS 0.29%Mar 7, 2026
- Medium6.5hoppscotch is an open source API development ecosystem.Check if you run itEPSS 0.29%Mar 7, 2026
- High8.8Flowise is a drag & drop user interface to build a customized large language model flow.Check if you run itEPSS 0.49%Mar 7, 2026
- Medium6.0Flare is a Next.js-based, self-hostable file sharing platform that integrates with screenshot tools.Check if you run itEPSS 0.32%Mar 6, 2026
- High8.2Flare is a Next.js-based, self-hostable file sharing platform that integrates with screenshot tools.Check if you run itEPSS 0.42%Mar 6, 2026
- Critical9.3Wekan is an open source kanban tool built with Meteor.Check if you run itEPSS 0.40%Mar 6, 2026
- Medium6.5Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts.Check if you run itEPSS 0.36%Mar 6, 2026
- High8.2OpenClaw versions prior to 2026.2.14 contain a webhook routing vulnerability in the Google Chat monitor component that allows cross-account policy context misrouting w…Check if you run itEPSS 0.51%Mar 5, 2026
- Medium5.4Vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs.Check if you run itEPSS 0.24%Mar 4, 2026
- Medium6.9Craft is a content management system (CMS).Check if you run itEPSS 0.35%Mar 4, 2026
- Medium5.3Craft is a content management system (CMS).Check if you run itEPSS 0.30%Mar 4, 2026
- High7.1Craft is a content management system (CMS).Check if you run itEPSS 0.47%Mar 4, 2026
- High8.7Craft is a content management system (CMS).Check if you run itEPSS 0.44%Mar 4, 2026
- High8.4In parsePermissionGroup of ParsedPermissionUtils.java, there is a possible way to bypass a consent dialog to obtain permissions due to a permissions bypass.Check if you run itEPSS 0.10%Mar 2, 2026
- Medium4.9NocoDB is software for building databases as spreadsheets.Check if you run itEPSS 0.28%Mar 2, 2026
- High7.1The CGM CLININET application uses direct, sequential object identifiers "MessageID" without proper authorization checks.Check if you run itEPSS 0.22%Mar 2, 2026
- Medium5.7ClipBucket v5 is an open source video sharing platform.Check if you run itEPSS 0.33%Feb 27, 2026
- Medium6.5Seerr is an open-source media request and discovery manager for Jellyfin, Plex, and Emby.Check if you run itEPSS 0.43%Feb 27, 2026
- High7.1OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.23%Feb 27, 2026
- Medium5.3The WP Recipe Maker plugin for WordPress is vulnerable to an Insecure Direct Object Reference (IDOR) in versions up to, and including, 10.3.2.Check if you run itEPSS 0.26%Feb 27, 2026