Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7CoreDNS is a DNS server that chains plugins.Check if you run itEPSS 0.47%May 5, 2026
- Medium5.3FacturaScripts is an open source accounting and invoicing software.Check if you run itEPSS 0.33%May 5, 2026
- High8.2Sandboxie is an open source sandbox-based isolation software for Windows.Check if you run itEPSS 0.15%May 5, 2026
- Medium6.8Tunnelblick is an open source graphic user interface for OpenVPN on macOS.Check if you run itEPSS 0.24%May 5, 2026
- High7.5Bitcoin Core through 28.x has a security issue, the details of which are not disclosed.Check if you run itEPSS 0.42%May 5, 2026
- High7.4A vulnerability was detected in D-Link DI-8100 16.07.26A1.Check if you run itEPSS 1.06%May 5, 2026
- High8.9A security vulnerability has been detected in D-Link DI-8100 16.07.26A1.Check if you run itEPSS 5.86%May 5, 2026
- High7.7An issue was discovered in idrac in OpenStack Ironic before 35.0.1.Check if you run itEPSS 0.43%May 5, 2026
- Critical9.8Kestra v1.3.3 and before is vulnerable to SQL Injection.Check if you run itEPSS 0.37%May 5, 2026
- Medium5.3Vaultwarden is a Bitwarden-compatible server written in Rust.Check if you run itEPSS 0.15%May 5, 2026
- High8.2ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx.Check if you run itEPSS 0.43%May 5, 2026
- Critical9.8OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables.Patch nowKEVEPSS 7.09%May 5, 2026
- High8.9A weakness has been identified in D-Link DI-8100 16.07.26A1.Check if you run itEPSS 1.52%May 5, 2026
- High7.3A vulnerability was identified in D-Link DI-8100 16.07.26A1.Check if you run itEPSS 4.08%May 5, 2026
- Low1.2A vulnerability was found in chatchat-space Langchain-Chatchat up to 0.3.1.3.Check if you run itEPSS 0.24%May 5, 2026
- Medium5.3An issue was discovered in OpenStack Horizon 25.6 and 25.7 before 25.7.3.Check if you run itEPSS 0.36%May 5, 2026
- Medium6.1ERPNext v15.103.1 and before is vulnerable to Cross Site Scripting (XSS) in the Email Template engine.Check if you run itEPSS 0.18%May 5, 2026
- Critical9.8ERPNext v15.103.1 and before is vulnerable to Server-Side Template Injection (SSTI).Check if you run itEPSS 0.39%May 5, 2026
- Critical9.8OpenCMS v20 and before is vulnerable to XML External Entity (XXE) in the Admin Import DB feature due to insecure XML parsing of user supplied .zip files containing a manifest.xml.Check if you run itEPSS 0.30%May 5, 2026
- High7.7RedisBloom is a probabilistic data structures module for Redis.Check if you run itEPSS 1.70%May 5, 2026
- High7.7RedisTimeSeries is a time-series module for Redis.Check if you run itEPSS 1.28%May 5, 2026
- Medium6.1Redis is an in-memory data structure store.Check if you run itEPSS 3.09%May 5, 2026
- High7.4A hidden console command is vulnerable to command injection flaw when control characters are passed to its second argument.Check if you run itEPSS 0.75%May 5, 2026
- Low1.2A vulnerability has been found in chatchat-space Langchain-Chatchat up to 0.3.1.3.Check if you run itEPSS 0.16%May 5, 2026
- Low1.2A flaw has been found in chatchat-space Langchain-Chatchat up to 0.3.1.3.Check if you run itEPSS 0.14%May 5, 2026
Sort