Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Elysia is a Typescript framework for request validation, type inference, OpenAPI documentation and client-server communication.Check if you run itEPSS 0.55%Mar 10, 2026
- Critical9.3Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript.Check if you run itEPSS 0.51%Mar 10, 2026
- High7.5IBM Aspera Orchestrator 3.0.0 through 4.1.2 stores sensitive information in URL parameters.Check if you run itEPSS 0.38%Mar 10, 2026
- Critical9.3Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript.Check if you run itEPSS 0.57%Mar 10, 2026
- Low1.9Craft Commerce is an ecommerce platform for Craft CMS.Check if you run itEPSS 0.24%Mar 10, 2026
- Medium4.8Craft Commerce is an ecommerce platform for Craft CMS.Check if you run itEPSS 0.27%Mar 10, 2026
- Medium5.4IBM Aspera Faspex 5 5.0.0 through 5.0.14.3 is vulnerable to cross-site scripting.Check if you run itEPSS 0.24%Mar 10, 2026
- High8.6Craft Commerce is an ecommerce platform for Craft CMS.Check if you run itEPSS 0.24%Mar 10, 2026
- Medium5.4IBM Aspera Faspex 5 5.0.0 through 5.0.14.3 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers.Check if you run itEPSS 0.24%Mar 10, 2026
- High8.7Craft Commerce is an ecommerce platform for Craft CMS.Check if you run itEPSS 0.49%Mar 10, 2026
- Low1.9Craft Commerce is an ecommerce platform for Craft CMS.Check if you run itEPSS 0.37%Mar 10, 2026
- High7.8IBM Trusteer Rapport installer 3.5.2309.290 IBM Trusteer Rapport could allow a local attacker to execute arbitrary code on the system, caused by DLL uncontrolled search path elemenCheck if you run itEPSS 0.16%Mar 10, 2026
- High8.7Craft Commerce is an ecommerce platform for Craft CMS.Check if you run itEPSS 0.47%Mar 10, 2026
- Low2.3Craft is a content management system (CMS).Check if you run itEPSS 0.20%Mar 10, 2026
- Critical10.0In DeviceId of DeviceId.java, there is a possible desync in persistence due to a missing bounds check.Check if you run itEPSS 0.21%Mar 10, 2026
- Critical9.7GetSimple CMS is a content management system.Check if you run itEPSS 0.35%Mar 10, 2026
- High7.5Envoy is a high-performance edge/middle/service proxy.Check if you run itEPSS 0.36%Mar 10, 2026
- High7.8Substance3D - Stager versions 3.1.7 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.Check if you run itEPSS 0.20%Mar 10, 2026
- High7.8Substance3D - Stager versions 3.1.7 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of th…Check if you run itEPSS 0.17%Mar 10, 2026
- High7.8Substance3D - Stager versions 3.1.7 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of th…Check if you run itEPSS 0.17%Mar 10, 2026
- Medium5.5Substance3D - Painter versions 11.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service.Check if you run itEPSS 0.15%Mar 10, 2026
- Medium5.5Substance3D - Painter versions 11.1.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to memory exposure.Check if you run itEPSS 0.17%Mar 10, 2026
- Medium5.5Substance3D - Painter versions 11.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service.Check if you run itEPSS 0.15%Mar 10, 2026
- Medium5.9Envoy is a high-performance edge/middle/service proxy.Check if you run itEPSS 0.39%Mar 10, 2026
- High7.5Envoy is a high-performance edge/middle/service proxy.Check if you run itEPSS 0.44%Mar 10, 2026
Sort