Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Zulip is an open-source team collaboration tool.Check if you run itEPSS 0.32%Apr 3, 2026
- Medium6.9Development and test API endpoints are present that mirror production functionality.Check if you run itEPSS 0.33%Apr 3, 2026
- High8.7Allocation of resources without limits in the parsing components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to cause a denial of service by delivering cCheck if you run itEPSS 0.39%Apr 3, 2026
- Critical9.1Insufficient authentication security controls in the browser-based authentication components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to intercept orCheck if you run itEPSS 0.51%Apr 3, 2026
- Critical9.1Improper certificate validation in the identity provider connection components in Amazon Athena ODBC driver before 2.1.0.0 might allow a man-in-the-middle threat actor to interceptCheck if you run itEPSS 0.28%Apr 3, 2026
- Critical9.8Cloudreve is a self-hosted file management and sharing system.Check if you run itEPSS 0.39%Apr 3, 2026
- Critical10.0ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI.Check if you run itEPSS 0.39%Apr 3, 2026
- Medium6.9A weakness has been identified in BookStackApp BookStack up to 26.03.Check if you run itEPSS 0.33%Apr 3, 2026
- Medium5.3A flaw was found in util-linux.Check if you run itEPSS 0.44%Apr 3, 2026
- Medium5.5A flaw was found in rust-rpm-sequoia.Check if you run itEPSS 0.09%Apr 3, 2026
- Critical9.8Fortinet FortiClient EMS Improper Access Control VulnerabilityPatch nowKEVEPSS 93.98%Apr 3, 2026
- Low2.1A vulnerability was identified in NASA cFS up to 7.0.0 on 32-bit.Check if you run itEPSS 0.22%Apr 3, 2026
- Critical10.0Server-side request forgery (ssrf) in Microsoft Bing allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.72%Apr 3, 2026
- Medium5.1A vulnerability was determined in NASA cFS up to 7.0.0.Check if you run itEPSS 0.23%Apr 3, 2026
- Critical9.8In mlflow/mlflow, the FastAPI job endpoints under are not protected by authentication or authorization when the app is enabled.Check if you run itEPSS 4.39%Apr 3, 2026
- Medium5.3A vulnerability was found in NASA cFS up to 7.0.0.Check if you run itEPSS 0.39%Apr 3, 2026
- Low2.0A vulnerability has been found in NASA cFS up to 7.0.0.Check if you run itEPSS 0.23%Apr 3, 2026
- Medium5.3A flaw has been found in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59.Check if you run itEPSS 0.21%Apr 3, 2026
- Medium6.3immich is a high performance self-hosted photo and video management solution.Check if you run itEPSS 0.47%Apr 3, 2026
- High8.7Budibase is an open-source low-code platform.Check if you run itEPSS 0.34%Apr 3, 2026
- Critical9.1Budibase is an open-source low-code platform.Check this weekEPSS 10.90%Apr 3, 2026
- Medium4.8A vulnerability was detected in Investory Toy Planet Trouble App up to 1.5.5 on Android.Check if you run itEPSS 0.15%Apr 3, 2026
- High8.7Budibase is an open-source low-code platform.Check if you run itEPSS 0.56%Apr 3, 2026
- Critical9.9Budibase is an open-source low-code platform.Check if you run itEPSS 0.38%Apr 3, 2026
- High8.7Budibase is an open-source low-code platform.Check if you run itEPSS 0.47%Apr 3, 2026
Sort