Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Free5GC is an open-source Linux Foundation project for 5th generation (5G) mobile core networks.Check if you run itEPSS 0.52%Apr 15, 2026
- Medium4.3The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to Missing…Check if you run itEPSS 0.32%Apr 15, 2026
- High8.8OWASP BLT is a QA testing and vulnerability disclosure platform that encompasses websites, apps, git repositories, and more.Check if you run itEPSS 0.42%Apr 15, 2026
- Low2.9Yubico libfido2 before 1.17.0, python-fido2 before 2.2.0, and yubikey-manager before 5.9.1 have an unintended DLL search path.Check if you run itEPSS 0.13%Apr 15, 2026
- High8.7Pillow is a Python imaging library.Check if you run itEPSS 0.70%Apr 15, 2026
- Medium5.4Istio is an open platform to connect, manage, and secure microservices.Check if you run itEPSS 0.22%Apr 15, 2026
- Medium4.8Pega Platform versions 8.1.0 through 25.1.1 are affected by a Stored Cross-Site Scripting vulnerability in a user interface component.Check if you run itEPSS 0.19%Apr 15, 2026
- Medium5.1Pega Platform versions 8.1.0 through 25.1.1 are affected by an HTML Injection vulnerability in a user interface component.Check if you run itEPSS 0.19%Apr 15, 2026
- Critical9.1A flaw was found in ArgoCD Image Updater.Check if you run itEPSS 0.36%Apr 15, 2026
- Medium6.1ApostropheCMS is an open-source Node.js content management system.Check if you run itEPSS 0.25%Apr 15, 2026
- High8.8Composer is a dependency manager for PHP.Check if you run itEPSS 1.72%Apr 15, 2026
- High7.8Composer is a dependency manager for PHP.Check if you run itEPSS 1.06%Apr 15, 2026
- High8.5Barracuda RMM versions prior to 2025.2.2 contain a privilege escalation vulnerability that allows local attackers to gain SYSTEM-level privileges by exploiting overly permissive fiCheck if you run itEPSS 0.11%Apr 15, 2026
- Critical9.4Dgraph is an open source distributed GraphQL database.Check if you run itEPSS 0.52%Apr 15, 2026
- Low3.1Insufficient policy enforcement in Passwords in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to leak cross-…Check if you run itEPSS 0.23%Apr 15, 2026
- Medium5.3ApostropheCMS is an open-source Node.js content management system.Check if you run itEPSS 0.45%Apr 15, 2026
- High8.7ApostropheCMS is an open-source Node.js content management system.Check if you run itEPSS 0.31%Apr 15, 2026
- Medium5.4ApostropheCMS is an open-source Node.js content management system.Check if you run itEPSS 0.23%Apr 15, 2026
- Medium6.1Drupal core - Moderately critical - Cross-site scripting - SA-CORE-2026-003Check if you run itEPSS 0.20%Apr 15, 2026
- Medium5.3ApostropheCMS is an open-source Node.js content management system.Check if you run itEPSS 0.53%Apr 15, 2026
- Medium6.6Drupal core - Moderately critical - Gadget Chain - SA-CORE-2026-002Check if you run itEPSS 0.40%Apr 15, 2026
- Medium5.3The CVE-2021-36156 fix validates the namespace parameter for path traversal sequences after a single URL decode, by double encoding, an attacker can read files at the Ruler API endCheck if you run itEPSS 0.43%Apr 15, 2026
- Medium6.1Drupal core - Critical - Cross-site scripting - SA-CORE-2026-001Check if you run itEPSS 0.22%Apr 15, 2026
- Medium6.5A flaw was found in FFmpeg.Check if you run itEPSS 0.45%Apr 15, 2026
- Medium5.0Weblate is a web based localization tool.Check if you run itEPSS 0.34%Apr 15, 2026
Sort