Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists.Check if you run itEPSS 0.50%Apr 7, 2026
- High7.5text-generation-webui is an open-source web interface for running Large Language Models.Check if you run itEPSS 0.44%Apr 7, 2026
- High7.5pyLoad is a free and open-source download manager written in Python.Check if you run itEPSS 0.61%Apr 7, 2026
- Medium4.3Papra is a minimalistic document management and archiving platform.Check if you run itEPSS 0.30%Apr 7, 2026
- High8.2libp2p-rust is the official rust language Implementation of the libp2p networking stack.Check if you run itEPSS 0.42%Apr 7, 2026
- High7.5An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30.Check if you run itEPSS 0.85%Apr 7, 2026
- High8.7A race condition in the Apache Kafka Java producer client’s buffer pool management can cause messages to be silently delivered to incorrect topics.Check if you run itEPSS 0.65%Apr 7, 2026
- High8.7Tinyproxy through 1.11.3 is vulnerable to HTTP request parsing desynchronization due to a case-sensitive comparison of the Transfer-Encoding header in src/reqs.c.Check if you run itEPSS 0.74%Apr 7, 2026
- High7.5Cross-Site Request Forgery (CSRF) vulnerability in Analytify Simple Social Media Share Buttons allows Cross Site Request Forgery.This issue affects Simple Social Media…Check if you run itEPSS 0.16%Apr 7, 2026
- High7.5Cross-Site Request Forgery (CSRF) vulnerability in Analytify Under Construction, Coming Soon & Maintenance Mode allows Cross Site Request Forgery.This issue affects Un…Check if you run itEPSS 0.16%Apr 7, 2026
- Medium5.4The Popup Box WordPress plugin before 5.5.0 does not properly validate nonces in the add_or_edit_popupbox() function before saving popup data, allowing unauthenticated…Check if you run itEPSS 0.14%Apr 7, 2026
- Critical9.3Weaver e-cology Missing Authentication for Critical FunctionPatch nowKEVEPSS 20.36%Apr 7, 2026
- High8.7Unsanitized control of user-modifiable attributes in the session creation component in AWS Research and Engineering Studio (RES) prior to version 2026.03 could allow a…Check if you run itEPSS 0.74%Apr 6, 2026
- Medium6.5Directus is a real-time API and App dashboard for managing SQL database content.Check if you run itEPSS 0.42%Apr 6, 2026
- High7.7Directus is a real-time API and App dashboard for managing SQL database content.Check if you run itEPSS 0.38%Apr 6, 2026
- Medium5.1OCS Inventory NG Server version 2.12.3 and prior contain a stored cross-site scripting vulnerability that allows unauthenticated attackers to execute arbitrary JavaScr…Check if you run itEPSS 0.22%Apr 6, 2026
- High8.8WeGIA is a Web manager for charitable institutions.Check if you run itEPSS 0.46%Apr 6, 2026
- Critical9.3pyLoad is a free and open-source download manager written in Python.Check if you run itEPSS 0.38%Apr 6, 2026
- High7.7pyLoad is a free and open-source download manager written in Python.Check if you run itEPSS 0.36%Apr 6, 2026
- High7.5defu is software that allows uers to assign default properties recursively.Check if you run itEPSS 0.52%Apr 6, 2026
- High8.8text-generation-webui is an open-source web interface for running Large Language Models.Check if you run itEPSS 0.60%Apr 6, 2026
- High7.2Ech0 is an open-source, self-hosted publishing platform for personal idea sharing.Check if you run itEPSS 0.72%Apr 6, 2026
- Medium5.8The whisperX API is a tool for enhancing and analyzing audio content.Check if you run itEPSS 0.42%Apr 6, 2026
- Critical9.3Aperi'Solve is an open-source steganalysis web platform.Check if you run itEPSS 1.17%Apr 6, 2026
- Medium6.5vLLM is an inference and serving engine for large language models (LLMs).Check if you run itEPSS 0.77%Apr 6, 2026