Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4A privileged Ignition user, intentionally or otherwise, imports an external file with a specially crafted payload, which executes embedded malicious code.Check if you run itEPSS 0.38%Mar 12, 2026
- Low2.0The "tarfile" module would still apply normalization of AREGTYPE (\x00) blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPE_LONGNAME or GNUTYPE_LONGLINK.Check if you run itEPSS 0.18%Mar 12, 2026
- Medium5.3Uptime Kuma is an open source, self-hosted monitoring tool.Check if you run itEPSS 0.98%Mar 12, 2026
- Medium5.3Shopware is an open commerce platform.Check if you run itEPSS 0.23%Mar 12, 2026
- High7.5flatted is a circular JSON parser.Check if you run itEPSS 0.90%Mar 12, 2026
- Critical9.3Dataease is an open source data visualization analysis tool.Check if you run itEPSS 0.79%Mar 12, 2026
- Medium5.3Dataease is an open source data visualization analysis tool.Check if you run itEPSS 0.23%Mar 12, 2026
- Critical9.3Dataease is an open source data visualization analysis tool.Check if you run itEPSS 0.47%Mar 12, 2026
- High8.7soroban-poseidon provides Poseidon and Poseidon2 cryptographic hash functions for Soroban smart contracts.Check if you run itEPSS 0.23%Mar 12, 2026
- High8.2Magic Wormhole makes it possible to get arbitrary-sized files and directories from one computer to another.Check if you run itEPSS 0.40%Mar 12, 2026
- Medium4.8Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF.Check if you run itEPSS 0.16%Mar 12, 2026
- Medium6.9A Use of Hard-coded, Security-relevant Constants vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to disclose sensitive information and taCheck if you run itEPSS 0.30%Mar 12, 2026
- High8.2A Use of Hard-coded Credentials vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to disclose sensitive information and take over accounts.Check if you run itEPSS 0.33%Mar 12, 2026
- Medium6.9A Missing Authorization vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an unauthenticated attacker to access sensitive information through unprotectCheck if you run itEPSS 0.31%Mar 12, 2026
- High8.7A Memory Allocation with Excessive Size Value vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an unauthenticated attacker to cause a denial-of-servicCheck if you run itEPSS 0.35%Mar 12, 2026
- High8.5A command injection vulnerability has been identified in the Telnet command-line interface (CLI) of TP-Link TL-MR6400 v5.3.Check if you run itEPSS 1.93%Mar 12, 2026
- Critical9.2A Use of a Broken or Risky Cryptographic Algorithm vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge could allow an attacker to bypass authentication and gain rootCheck if you run itEPSS 0.25%Mar 12, 2026
- Medium6.1Unhead is a document head and template manager.Check if you run itEPSS 0.27%Mar 12, 2026
- Medium5.3Unhead is a document head and template manager.Check if you run itEPSS 0.29%Mar 12, 2026
- High7.5multipart is a fast multipart/form-data parser for python.Check if you run itEPSS 0.84%Mar 12, 2026
- Medium6.5Hyperterse is a tool-first MCP framework for building AI-ready backend surfaces from declarative config.Check if you run itEPSS 0.20%Mar 12, 2026
- High7.7OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables.Check if you run itEPSS 0.25%Mar 12, 2026
- Medium6.2Tina is a headless content management system.Check if you run itEPSS 1.11%Mar 12, 2026
- High7.4Tina is a headless content management system.Check if you run itEPSS 0.38%Mar 12, 2026
- High8.4Tina is a headless content management system.Check if you run itEPSS 0.24%Mar 12, 2026
Sort