Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.0Thymeleaf is a server-side Java template engine for web and standalone environments.Check if you run itEPSS 1.10%Apr 17, 2026
- Critical9.0Thymeleaf is a server-side Java template engine for web and standalone environments.Check if you run itEPSS 0.85%Apr 17, 2026
- Medium6.9graphql-go is a Go implementation of GraphQL.Check if you run itEPSS 0.85%Apr 17, 2026
- High7.6wger is a free, open-source workout and fitness manager.Check if you run itEPSS 0.33%Apr 17, 2026
- Medium5.1wger is a free, open-source workout and fitness manager.Check if you run itEPSS 0.21%Apr 17, 2026
- High8.8FastGPT is an AI Agent building platform.Check if you run itEPSS 0.38%Apr 17, 2026
- Critical9.8FastGPT is an AI Agent building platform.Check if you run itEPSS 0.63%Apr 17, 2026
- High8.0DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem.Check if you run itEPSS 6.41%Apr 17, 2026
- Medium6.9DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem.Check if you run itEPSS 0.18%Apr 17, 2026
- Medium4.3DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem.Check if you run itEPSS 0.18%Apr 17, 2026
- Medium5.3zrok is software for sharing web services, files, and network resources.Check if you run itEPSS 0.29%Apr 17, 2026
- Critical9.1The Gramps Web API is a Python REST API for the genealogical research software Gramps.Check if you run itEPSS 0.40%Apr 17, 2026
- High8.8libcoap contains out-of-bounds read vulnerabilities in OSCORE Appendix B.2 CBOR unwrap handling where get_byte_inc() in src/oscore/oscore_cbor.c relies solely on asser…Check if you run itEPSS 0.30%Apr 17, 2026
- High8.5radare2 prior to commit bc5a890 contains a command injection vulnerability in the afsv/afsvj command path where crafted ELF binaries can embed malicious r2 command seq…Check if you run itEPSS 0.92%Apr 17, 2026
- High7.5zrok is software for sharing web services, files, and network resources.Check if you run itEPSS 0.45%Apr 17, 2026
- Medium6.1zrok is software for sharing web services, files, and network resources.Check if you run itEPSS 0.21%Apr 17, 2026
- Medium4.7DOMSanitizer is a DOM/SVG/MathML Sanitizer for PHP 7.3+.Check if you run itEPSS 0.32%Apr 17, 2026
- Medium6.9next-intl provides internationalization for Next.js.Check if you run itEPSS 0.34%Apr 17, 2026
- Medium6.5OpenFGA is an authorization/permission engine built for developers.Check if you run itEPSS 0.29%Apr 17, 2026
- High7.5WeGIA is a web manager for charitable institutions.Check if you run itEPSS 0.21%Apr 17, 2026
- High8.8WeGIA is a web manager for charitable institutions.Check if you run itEPSS 0.32%Apr 17, 2026
- Medium6.8WeGIA is a web manager for charitable institutions.Check if you run itEPSS 0.23%Apr 17, 2026
- Medium6.4WeGIA is a web manager for charitable institutions.Check if you run itEPSS 0.26%Apr 17, 2026
- High8.1HomeBox is a home inventory and organization system.Check if you run itEPSS 0.25%Apr 17, 2026
- Medium5.4The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications.Check if you run itEPSS 0.21%Apr 17, 2026
Sort