Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5SoftEtherVPN is a an open-source cross-platform multi-protocol VPN Program.Check if you run itEPSS 0.47%Apr 7, 2026
- Critical9.4Windmill CE and EE versions 1.276.0 through 1.603.2 contain an SQL injection vulnerability in the folder ownership management functionality that allows authenticated attackers to iCheck this weekEPSS 13.58%Apr 7, 2026
- High8.7Windmill versions 1.56.0 through 1.614.0 contain a missing authorization vulnerability that allows users with the Operator role to perform prohibited entity creation and modificatiCheck if you run itEPSS 2.61%Apr 7, 2026
- High8.1PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.33%Apr 7, 2026
- High7.1PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.34%Apr 7, 2026
- High7.3PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.30%Apr 7, 2026
- Critical10.0PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.32%Apr 7, 2026
- Critical9.2PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.43%Apr 7, 2026
- Medium6.5Authenticated DoS over CQL in Apache Cassandra 4.0, 4.1, 5.0 allows authenticated user to raise query latencies via repeated password changes.Check if you run itEPSS 0.55%Apr 7, 2026
- Critical9.3Frappe is a full-stack web application framework.Check if you run itEPSS 0.27%Apr 7, 2026
- Medium5.5Sensitive Information Leak in cqlsh in Apache Cassandra 4.0 allows access to sensitive information, like passwords, from previously executed cqlsh command via ~/.cassandra/cqlsh_hiCheck if you run itEPSS 0.17%Apr 7, 2026
- Medium5.1coursevault-preview is a utility for previewing course material files from a configured directory.Check if you run itEPSS 0.15%Apr 7, 2026
- High7.5Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library.Check if you run itEPSS 0.37%Apr 7, 2026
- Medium5.3QuickDrop is an easy-to-use file sharing application.Check if you run itEPSS 0.19%Apr 7, 2026
- High7.8A flaw was found in libssh.Check if you run itEPSS 0.14%Apr 7, 2026
- High8.8Privilege escalation in Apache Cassandra 5.0 on an mTLS environment using MutualTlsAuthenticator allows a user with only CREATE permission to associate their own certificate identiCheck if you run itEPSS 0.27%Apr 7, 2026
- High8.8File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory.Check if you run itEPSS 0.40%Apr 7, 2026
- Critical9.8Cockpit's remote login feature passes user-supplied hostnames and usernames from the web interface to the SSH client without validation or sanitization.Patch nowKEVEPSS 15.48%Apr 7, 2026
- Medium5.3File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory.Check if you run itEPSS 0.35%Apr 7, 2026
- Medium5.3The Backup Migration plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 2.0.0.Check if you run itEPSS 0.58%Apr 7, 2026
- Medium6.3File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory.Check if you run itEPSS 0.41%Apr 7, 2026
- High8.2File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory.Check if you run itEPSS 0.34%Apr 7, 2026
- High7.5File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory.Check if you run itEPSS 2.00%Apr 7, 2026
- High8.6Smart contract Marginal v1 performs unsafe downcast, allowing attackers to settle a large debt position for a negligible asset cost.Check if you run itEPSS 0.27%Apr 7, 2026
- Medium4.8Emissary is a P2P based data-driven workflow engine.Check if you run itEPSS 0.18%Apr 7, 2026
Sort