Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.1Apache Airflow's official documentation at ("Passing Parameters when triggering Dags") showed a verbatim example without any quoting / sanitization warning.Check if you run itEPSS 0.59%Jun 1, 2026
- Low3.1The structure_data endpoint in the Airflow UI returned external dependency graph nodes for linked Dags without checking whether the caller had read permission on those linked Dags.Check if you run itEPSS 0.52%Jun 1, 2026
- Low2.1A security flaw has been discovered in jeecgboot The server processes these URLs up to 3.9.1.Check if you run itEPSS 0.27%Jun 1, 2026
- Low3.5An incorrect handling of permissions in STORM powered by OTRS and in OTRS (2026.x and above) Document Search Article Meta Filters modules allows gaining knowledge abou…Check if you run itEPSS 0.24%Jun 1, 2026
- Low2.1A security vulnerability has been detected in Metasoft 美特软件 MetaCRM 6.4.0.Check if you run itEPSS 0.20%Jun 1, 2026
- Low2.1A security vulnerability has been detected in Aider-AI Aider 0.86.3.Check if you run itEPSS 0.21%May 31, 2026
- Medium6.5Shopper is a Headless e-commerce Admin Panel.Check if you run itEPSS 0.31%May 29, 2026
- Medium5.4Statamic is a Laravel and Git powered content management system (CMS).Check if you run itEPSS 0.24%May 29, 2026
- Medium6.3Arcane is an interface for managing Docker containers, images, networks, and volumes.Check if you run itEPSS 0.36%May 29, 2026
- High8.7agno 2.6.5 contains a SQL injection vulnerability in the ClickHouse vector database backend that allows attackers to inject arbitrary SQL expressions by supplying mali…Check if you run itEPSS 0.40%May 29, 2026
- Critical9.1GitHub CLI (gh) is GitHub’s official command line tool.Check if you run itEPSS 0.45%May 29, 2026
- Critical9.9Dokploy is a free, self-hostable Platform as a Service (PaaS).Check if you run itEPSS 1.05%May 29, 2026
- Medium6.5mcp-security provides Security and Authorization support for Model Context Protocol in Spring AI.Check if you run itEPSS 0.28%May 29, 2026
- High8.8WWBN AVideo is an open source video platform.Check if you run itEPSS 0.53%May 29, 2026
- Medium6.5A flaw was found in the OpenShift Router.Check if you run itEPSS 0.53%May 29, 2026
- Medium5.3The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the update_sit…Check if you run itEPSS 0.41%May 29, 2026
- High8.1The Media Library Assistant plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.35 This is due to missing nonce verifi…Check if you run itEPSS 0.32%May 29, 2026
- Critical9.8The OTP Login With Phone Number, OTP Verification plugin for WordPress is vulnerable to authentication bypass in versions 1.8.50 through 1.8.60.Check if you run itEPSS 0.90%May 29, 2026
- Medium6.4The StatCounter – Free Real Time Visitor Stats plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.1.1 This is due to…Check if you run itEPSS 0.35%May 29, 2026
- Medium4.3AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.Check if you run itEPSS 0.30%May 28, 2026
- High8.5LinkAce is a self-hosted archive to collect website links.Check if you run itEPSS 0.49%May 28, 2026
- Medium6.1Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly attempt to free a pointer which was not previously kmalloc()d, while at the same time l…Check if you run itEPSS 0.13%May 28, 2026
- Medium6.9RustFS is a distributed object storage system built in Rust.Check if you run itEPSS 0.54%May 28, 2026
- Medium5.0Local Deep Research is an AI-powered research assistant for deep, iterative research.Check if you run itEPSS 0.36%May 28, 2026
- High7.4CodeWhale is a DeepSeek + MiMo coding agent in terminal.Check if you run itEPSS 0.37%May 28, 2026