Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend.Check if you run itEPSS 0.65%Feb 27, 2026
- Medium6.9Charging station authentication identifiers are publicly accessible via web-based mapping platforms.Check if you run itEPSS 0.35%Feb 27, 2026
- Medium6.9The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier.Check if you run itEPSS 0.40%Feb 27, 2026
- High8.7The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests.Check if you run itEPSS 0.55%Feb 27, 2026
- Medium6.9Charging station authentication identifiers are publicly accessible via web-based mapping platforms.Check if you run itEPSS 0.35%Feb 27, 2026
- Critical9.3WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend.Check if you run itEPSS 0.59%Feb 27, 2026
- Medium6.9Charging station authentication identifiers are publicly accessible via web-based mapping platforms.Check if you run itEPSS 0.32%Feb 27, 2026
- High8.4An unquoted Windows service executable path vulnerability in IJ Scan Utility for Windows versions 1.1.2 through 1.5.0 may allow a local attacker to execute a malicious…Check if you run itEPSS 0.14%Feb 27, 2026
- High8.2Apache::SessionX versions through 2.01 for Perl create insecure session id.Check if you run itEPSS 0.23%Feb 27, 2026
- Low2.1A vulnerability was detected in psi-probe PSI Probe up to 5.3.0.Check if you run itEPSS 0.27%Feb 26, 2026
- Low2.1A vulnerability was identified in go2ismail Free-CRM up to b83c40a90726d5e58f0cc680ffdcaa28a03fb5d1.Check if you run itEPSS 0.51%Feb 26, 2026
- Low2.1A vulnerability was determined in go2ismail Free-CRM up to b83c40a90726d5e58f0cc680ffdcaa28a03fb5d1.Check if you run itEPSS 0.48%Feb 26, 2026
- High8.7osctrl is an osquery management solution.Check if you run itEPSS 0.27%Feb 26, 2026
- High8.4osctrl is an osquery management solution.Check if you run itEPSS 0.97%Feb 26, 2026
- High7.5Initiative is a self-hosted project management platform.Check if you run itEPSS 0.36%Feb 26, 2026
- High8.1Initiative is a self-hosted project management platform.Check if you run itEPSS 0.41%Feb 26, 2026
- High8.7Initiative is a self-hosted project management platform.Check if you run itEPSS 0.64%Feb 26, 2026
- High8.8Kiteworks is a private data network (PDN).Check if you run itEPSS 2.20%Feb 26, 2026
- Medium5.7SteVe is an open-source EV charging station management system.Check if you run itEPSS 0.18%Feb 26, 2026
- Medium6.5Phishing Club is a phishing simulation and man-in-the-middle framework.Check if you run itEPSS 0.39%Feb 26, 2026
- Medium6.5Manyfold is an open source, self-hosted web application for managing a collection of 3d models, particularly focused on 3d printing.Check if you run itEPSS 0.31%Feb 26, 2026
- Medium6.5hoppscotch is an open source API development ecosystem.Check if you run itEPSS 0.41%Feb 26, 2026
- High8.3hoppscotch is an open source API development ecosystem.Check if you run itEPSS 0.44%Feb 26, 2026
- Critical9.1hoppscotch is an open source API development ecosystem.Check if you run itEPSS 0.59%Feb 26, 2026
- Critical9.8EverShop is a TypeScript-first eCommerce platform.Check if you run itEPSS 0.49%Feb 26, 2026
Sort