Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low3.9FacturaScripts is an open source accounting and invoicing software.Check if you run itEPSS 0.10%May 18, 2026
- Medium6.5FacturaScripts is an open source accounting and invoicing software.Check if you run itEPSS 0.23%May 18, 2026
- High7.2FacturaScripts is an open source accounting and invoicing software.Check if you run itEPSS 0.52%May 18, 2026
- Medium6.5BigBlueButton is an open-source virtual classroom.Check if you run itEPSS 0.26%May 18, 2026
- High8.6SOGo versions 5.12.7 and prior contains a SQL injection vulnerability in the Access Control List management functionality that allows authenticated users to extract ar…Check if you run itEPSS 0.32%May 18, 2026
- Critical9.3Unsafe use of Python's eval() on server-received data in the vector_in() function in amazon-redshift-python-driver before 2.1.14 allows a rogue server or man-in-the-mi…Check if you run itEPSS 0.81%May 18, 2026
- High7.8In mlflow/mlflow versions prior to 3.11.0, the function in creates temporary directories with world-writable permissions (0o777), and the function in creates directori…Check if you run itEPSS 0.19%May 18, 2026
- Critical9.9Dokploy is a free, self-hostable Platform as a Service (PaaS).Check if you run itEPSS 1.22%May 18, 2026
- High8.6FreePBX is an open source IP PBX.Check if you run itEPSS 0.90%May 18, 2026
- Critical9.8WebdriverIO is a test automation framework for unit, e2e and component testing using WebDriver, WebDriver BiDi and Appium.Check if you run itEPSS 3.31%May 18, 2026
- High7.3Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks.Check if you run itEPSS 0.21%May 18, 2026
- High7.3Claude HUD through 0.0.12, patched in commit 234d9aa, contains a command injection vulnerability that allows local attackers to execute arbitrary commands by manipulat…Check if you run itEPSS 0.51%May 18, 2026
- Medium4.8Claude HUD through 0.0.12, patched in commit 234d9aa, contains a path traversal vulnerability that allows attackers to read arbitrary files by supplying an unvalidated…Check if you run itEPSS 0.13%May 18, 2026
- Low2.4Claude HUD through 0.0.12, patched in commit 234d9aa, constructs OSC 8 terminal hyperlink escape sequences using raw cwd and branchUrl values without stripping control…Check if you run itEPSS 0.10%May 18, 2026
- Medium6.8Summarize prior to 0.15.1 contains an insecure file permission vulnerability in the refresh-free configuration rewrite path that allows local users to read sensitive c…Check if you run itEPSS 0.14%May 18, 2026
- Medium4.6Summarize prior to 0.15.1 contains a vulnerability in the hover summary feature that allows malicious pages to dispatch synthetic mouseover events over attacker-contro…Check if you run itEPSS 0.33%May 18, 2026
- Low2.1Summarize prior to 0.15.1 contains a missing authorization vulnerability that allows attackers to execute browser automation actions without per-call user approval whe…Check if you run itEPSS 0.23%May 18, 2026
- Medium4.6HCL Connections contains a broken access control vulnerability that may allow unauthorized user to update data in certain scenarios.Check if you run itEPSS 0.12%May 18, 2026
- Medium6.1SimpleSAMLphp-casserver is a CAS 1.0 and 2.0 compliant CAS server in the form of a SimpleSAMLphp module.Check if you run itEPSS 0.27%May 18, 2026
- High8.9A vulnerability was found in lwIP up to 2.2.1.Check if you run itEPSS 1.10%May 18, 2026
- Medium5.3Summarize prior to 0.15.1 contains a missing authorization vulnerability in the content script window.postMessage bridge that allows malicious pages to perform unautho…Check if you run itEPSS 0.19%May 18, 2026
- High7.1Summarize prior to 0.15.1 contains a path traversal vulnerability in the /v1/summarize daemon endpoint that allows authenticated callers to write files to arbitrary di…Check if you run itEPSS 0.40%May 18, 2026
- Medium5.3DumbAssets through 1.0.11 contains a stored cross-site scripting vulnerability in asset fields including name, description, modelNumber, serialNumber, and tags that ar…Check if you run itEPSS 0.19%May 18, 2026
- Critical9.8Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityCheck if you run itEPSS 0.99%May 18, 2026
- Medium6.1Microsoft Edge (Chromium-based) Spoofing VulnerabilityCheck if you run itEPSS 0.30%May 18, 2026
Sort