Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.0qui is a web interface for managing qBittorrent instances.Check if you run itEPSS 0.27%Mar 19, 2026
- Critical10.0Step CA is an online certificate authority for secure, automated certificate management for DevOps.Check if you run itEPSS 0.31%Mar 19, 2026
- Critical9.8ormar is a async mini ORM for Python.Check if you run itEPSS 1.24%Mar 19, 2026
- Medium5.1Discourse is an open-source discussion platform.Check if you run itEPSS 0.34%Mar 19, 2026
- Medium5.1Discourse is an open-source discussion platform.Check if you run itEPSS 0.37%Mar 19, 2026
- Medium6.9Discourse is an open-source discussion platform.Check if you run itEPSS 0.35%Mar 19, 2026
- Medium5.3Discourse is an open-source discussion platform.Check if you run itEPSS 0.98%Mar 19, 2026
- Medium5.4Discourse is an open source discussion platform.Check if you run itEPSS 0.20%Mar 19, 2026
- Critical9.9Server-side request forgery (ssrf) in Microsoft Exchange allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.56%Mar 19, 2026
- High7.5Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 0.69%Mar 19, 2026
- Medium5.3Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 0.76%Mar 19, 2026
- High8.6Exposure of sensitive information to an unauthorized actor in Azure Data Factory allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 0.83%Mar 19, 2026
- High7.5Server-side request forgery (ssrf) in Microsoft Bing allows an unauthorized attacker to perform tampering over a network.Check if you run itEPSS 0.59%Mar 19, 2026
- Critical9.8Insufficiently protected credentials in Azure DevOps allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.83%Mar 19, 2026
- Critical9.8Improper neutralization of special elements used in an os command ('os command injection') in Microsoft Bing Images allows an unauthorized attacker to execute code over a network.Check if you run itEPSS 0.83%Mar 19, 2026
- High8.6Server-side request forgery (ssrf) in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.57%Mar 19, 2026
- Critical10.0Server-side request forgery (ssrf) in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.60%Mar 19, 2026
- Critical10.0Server-side request forgery (ssrf) in Azure Cloud Shell allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.58%Mar 19, 2026
- Low2.1In wolfSSL 5.8.4, constant-time masking logic in sp_256_get_entry_256_9 is optimized into conditional branches (bnez) by GCC when targeting RISC-V RV32I with -O3.Check if you run itEPSS 0.14%Mar 19, 2026
- Low2.1wolfSSL 5.8.4 on RISC-V RV32I architectures lacks a constant-time software implementation for 64-bit multiplication.Check if you run itEPSS 0.28%Mar 19, 2026
- Critical9.1OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 2.01%Mar 19, 2026
- Medium4.4OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.17%Mar 19, 2026
- Medium6.5OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.58%Mar 19, 2026
- Medium6.5OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.23%Mar 19, 2026
- Medium4.3Protection mechanism failure in wolfCrypt post-quantum implementations (ML-KEM and ML-DSA) in wolfSSL on ARM Cortex-M microcontrollers allows a physical attacker to co…Check if you run itEPSS 0.16%Mar 19, 2026
Sort