Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical10.0Axios is a promise based HTTP client for the browser and Node.js.Check if you run itEPSS 0.71%Apr 24, 2026
- Medium5.4Axios is a promise based HTTP client for the browser and Node.js.Check if you run itEPSS 0.21%Apr 24, 2026
- Medium6.5Axios is a promise based HTTP client for the browser and Node.js.Check if you run itEPSS 0.66%Apr 24, 2026
- Low3.7Axios is a promise based HTTP client for the browser and Node.js.Check if you run itEPSS 0.22%Apr 24, 2026
- Medium6.9Axios is a promise based HTTP client for the browser and Node.js.Check if you run itEPSS 0.77%Apr 24, 2026
- High7.5Axios is a promise based HTTP client for the browser and Node.js.Check if you run itEPSS 0.32%Apr 24, 2026
- Medium5.3Axios is a promise based HTTP client for the browser and Node.js.Check if you run itEPSS 0.29%Apr 24, 2026
- Medium5.3Axios is a promise based HTTP client for the browser and Node.js.Check if you run itEPSS 0.33%Apr 24, 2026
- High7.4Axios is a promise based HTTP client for the browser and Node.js.Check if you run itEPSS 0.40%Apr 24, 2026
- Medium5.3Axios is a promise based HTTP client for the browser and Node.js.Check if you run itEPSS 0.33%Apr 24, 2026
- High7.4Axios is a promise based HTTP client for the browser and Node.js.Check if you run itEPSS 0.87%Apr 24, 2026
- High8.7Marked is a markdown parser and compiler.Check if you run itEPSS 0.34%Apr 24, 2026
- Medium5.3@astrojs/node allows Astro to deploy your SSR site to Node targets.Check if you run itEPSS 0.29%Apr 24, 2026
- Low2.2@astrojs/cloudflare is an SSR adapter for use with Cloudflare Workers targets.Check if you run itEPSS 0.24%Apr 24, 2026
- Low0.6Poetry is a dependency manager for Python.Check if you run itEPSS 0.29%Apr 24, 2026
- High8.7Improperly controlled modification of dynamically-determined object attributes in the Cognito User Pool configuration in AWS Ops Wheel before PR #165 allows remote aut…Check if you run itEPSS 0.55%Apr 24, 2026
- Critical9.3Missing JWT signature verification in AWS Ops Wheel allows unauthenticated attackers to forge JWT tokens and gain unintended administrative access to the application,…Check if you run itEPSS 0.25%Apr 24, 2026
- Medium6.6Vim is an open source, command line text editor.Check if you run itEPSS 0.50%Apr 24, 2026
- Medium5.4OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.Check if you run itEPSS 0.41%Apr 24, 2026
- Medium6.1Astro is a web framework.Check if you run itEPSS 0.19%Apr 24, 2026
- High7.5lxml is a library for processing XML and HTML in the Python language.Check if you run itEPSS 0.32%Apr 24, 2026
- High8.8Math.js is an extensive math library for JavaScript and Node.js.Check if you run itEPSS 0.55%Apr 24, 2026
- Critical9.3BridgeHead FileStore versions prior to 24A (released in early 2024) expose the Apache Axis2 administration module on network-accessible endpoints with default credenti…Check if you run itEPSS 0.54%Apr 24, 2026
- Medium5.4A client-side authorization flaw in Lightspeed Systems Classroom v5.1.2.1763770643 allows unauthenticated attackers to impersonate users by bypassing integrity checks…Check if you run itEPSS 0.35%Apr 24, 2026
- Medium6.5A Broken Access Control vulnerability exists in ClassroomIO v0.1.13 where an authenticated low-privileged "student" user can access unauthorized course-level informati…Check if you run itEPSS 0.21%Apr 24, 2026
Sort