Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.3Hono is a Web application framework that provides support for any JavaScript runtime.Check if you run itEPSS 0.35%Apr 8, 2026
- Medium5.3Hono is a Web application framework that provides support for any JavaScript runtime.Check if you run itEPSS 0.47%Apr 8, 2026
- Medium5.3@hono/node-server allows running the Hono application on Node.js.Check if you run itEPSS 0.38%Apr 8, 2026
- Critical9.8CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Check if you run itEPSS 0.53%Apr 8, 2026
- Medium4.8CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Check if you run itEPSS 0.25%Apr 8, 2026
- Medium4.8CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Check if you run itEPSS 0.24%Apr 8, 2026
- Medium4.8CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Check if you run itEPSS 0.24%Apr 8, 2026
- High8.6XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it.Check if you run itEPSS 0.55%Apr 8, 2026
- Medium5.9Hono is a Web application framework that provides support for any JavaScript runtime.Check if you run itEPSS 0.51%Apr 8, 2026
- High8.1CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Check if you run itEPSS 0.43%Apr 8, 2026
- High7.2CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Check if you run itEPSS 0.49%Apr 8, 2026
- Medium6.4A container privilege escalation flaw was found in certain OpenShift Update Service (OSUS) images.Check if you run itEPSS 0.15%Apr 8, 2026
- Medium6.4A container privilege escalation flaw was found in certain Web Terminal images.Check if you run itEPSS 0.16%Apr 8, 2026
- Medium6.7A container privilege escalation flaw was found in certain Multicluster Engine for Kubernetes images.Check if you run itEPSS 0.12%Apr 8, 2026
- Critical9.3Cleartext Storage of Sensitive Information in GUI vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions…Check if you run itEPSS 0.10%Apr 8, 2026
- Critical9.3Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.…Check if you run itEPSS 0.10%Apr 8, 2026
- Medium6.4A container privilege escalation flaw was found in certain Red Hat Process Automation Manager images.Check if you run itEPSS 0.15%Apr 8, 2026
- Medium6.4A container privilege escalation flaw was found in certain Ansible Automation Platform images.Check if you run itEPSS 0.19%Apr 8, 2026
- High7.4In Eclipse Jetty, the class JASPIAuthenticator initiates the authentication checks, which set two ThreadLocal variable.Check if you run itEPSS 0.54%Apr 8, 2026
- Medium6.4The Page Builder: Pagelayer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Button widget's Custom Attributes field in all versions up to, and including,Check if you run itEPSS 0.35%Apr 8, 2026
- Medium5.5A new API endpoint introduced in pretix 2025 that is supposed to return all check-in events of a specific event in fact returns all check-in events belonging to the re…Check if you run itEPSS 0.26%Apr 8, 2026
- Medium6.1Stored XSS in log viewer in CoolerControl/coolercontrol-ui <4.0.0 allows unauthenticated attackers to take over the service via malicious JavaScript in poisoned log entriesCheck if you run itEPSS 0.28%Apr 8, 2026
- Medium4.4Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.1.6 and versions 9.11.0.0 through 9.13.0.0, contains a generation of error message containing sensitive informatio…Check if you run itEPSS 0.16%Apr 8, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: atm: fix crash due to unvalidated vcc pointer in sigd_send() Reproducer available at [1].Check if you run itEPSS 0.13%Apr 8, 2026
- Medium5.3Wimi Teamwork On-Premises versions prior to 8.2.0 contain an insecure direct object reference vulnerability in the preview.php endpoint where the item_id parameter lacks proper autCheck if you run itEPSS 0.18%Apr 8, 2026
Sort