Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Vikunja is an open-source self-hosted task management platform.Check if you run itEPSS 1.18%Mar 24, 2026
- Medium6.4Vikunja is an open-source self-hosted task management platform.Check if you run itEPSS 0.26%Mar 24, 2026
- Medium6.5Vikunja is an open-source self-hosted task management platform.Check if you run itEPSS 0.41%Mar 24, 2026
- Medium5.4JiZhiCMS v2.5.6 and before contains a Stored Cross-Site Scripting (XSS) vulnerability in the release function within app/home/c/UserController.php.Check if you run itEPSS 0.18%Mar 24, 2026
- High8.8DedeCMS v5.7.118 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability in /sys_task_add.php.Check if you run itEPSS 0.15%Mar 24, 2026
- High8.1Vikunja is an open-source self-hosted task management platform.Check if you run itEPSS 0.39%Mar 24, 2026
- Medium6.9Vikunja is an open-source self-hosted task management platform.Check if you run itEPSS 0.32%Mar 24, 2026
- Medium5.3Vikunja is an open-source self-hosted task management platform.Check if you run itEPSS 0.28%Mar 24, 2026
- Medium6.5ConcreteCMS v9.4.7 contains a Denial of Service (DoS) vulnerability in the File Manager component.Check if you run itEPSS 0.31%Mar 24, 2026
- Medium6.1iCMS v8.0.0 contains a Cross-Site Scripting (XSS) vulnerability in the User Management component, specifically within the index.html file.Check if you run itEPSS 0.22%Mar 24, 2026
- Medium6.5SQL injection in Solicitante::resetaSenha() in esiclivre/esiclivre v0.2.2 and earlier allows unauthenticated remote attackers to gain unauthorized access to sensitive…Check if you run itEPSS 0.56%Mar 24, 2026
- High7.5An issue in Free5GC v.4.2.0 and before allows a remote attacker to cause a denial of service via the function HandleAuthenticationFailure of the component AMFCheck if you run itEPSS 0.42%Mar 24, 2026
- Medium5.3NGINX Plus and NGINX Open Source have a vulnerability in the ngx_stream_ssl_module module due to the improper handling of revoked certificates when configured with the…Check if you run itEPSS 0.14%Mar 24, 2026
- Medium6.3NGINX Plus and NGINX Open Source have a vulnerability in the ngx_mail_smtp_module module due to the improper handling of CRLF sequences in DNS responses.Check if you run itEPSS 0.28%Mar 24, 2026
- High7.8A flaw was found in the libtiff library.Check if you run itEPSS 0.58%Mar 24, 2026
- High8.7Langflow is a tool for building and deploying AI-powered agents and workflows.Patch nowKEVEPSS 19.99%Mar 24, 2026
- High7.5Langflow is a tool for building and deploying AI-powered agents and workflows.Check if you run itEPSS 6.07%Mar 24, 2026
- High7.5DiceBear is an avatar library for designers and developers.Check if you run itEPSS 0.39%Mar 24, 2026
- Medium4.7DiceBear is an avatar library for designers and developers.Check if you run itEPSS 0.19%Mar 24, 2026
- High8.8Intake is a package for finding, investigating, loading and disseminating data.Check if you run itEPSS 0.45%Mar 24, 2026
- High8.7When the ngx_mail_auth_http_module module is enabled on NGINX Plus or NGINX Open Source, undisclosed requests can cause worker processes to terminate.Check if you run itEPSS 0.98%Mar 24, 2026
- High8.8ZDI-26-578: NGINX HTTP Dav Module Alias Directive Integer Underflow Remote Code Execution VulnerabilityCheck this weekEPSS 26.46%Mar 24, 2026
- High8.5NGINX Open Source and NGINX Plus have a vulnerability in the ngx_http_mp4_module module, which might allow an attacker to trigger a buffer over-read or over-write to the NGINX workCheck if you run itEPSS 0.95%Mar 24, 2026
- High8.5The 32-bit implementation of NGINX Open Source has a vulnerability in the ngx_http_mp4_module module, which might allow an attacker to over-read or over-write NGINX worker memory rCheck if you run itEPSS 1.09%Mar 24, 2026
- Critical9.1Langflow is a tool for building and deploying AI-powered agents and workflows.Check if you run itEPSS 3.22%Mar 24, 2026
Sort