Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.9Dokploy is a free, self-hostable Platform as a Service (PaaS).Check if you run itEPSS 1.22%May 18, 2026
- Critical9.8WebdriverIO is a test automation framework for unit, e2e and component testing using WebDriver, WebDriver BiDi and Appium.Check if you run itEPSS 3.31%May 18, 2026
- Medium4.8Claude HUD through 0.0.12, patched in commit 234d9aa, contains a path traversal vulnerability that allows attackers to read arbitrary files by supplying an unvalidated…Check if you run itEPSS 0.16%May 18, 2026
- Medium5.5A vulnerability was determined in Metasoft 美特软件 MetaCRM up to 6.4.0 Beta06.Check if you run itEPSS 0.47%May 17, 2026
- Critical9.3libbabl 0.1.62 contains a broken double free detection vulnerability that allows attackers to bypass memory safety checks by exploiting signature overwriting in freed chunks.Check if you run itEPSS 0.46%May 16, 2026
- High8.5Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Check if you run itEPSS 0.33%May 15, 2026
- Medium4.3Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Check if you run itEPSS 0.30%May 15, 2026
- Medium6.5Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 Fail to validate the response body of proxied images, which allows a remote attacker to ena…Check if you run itEPSS 0.42%May 15, 2026
- High8.7phpMyFAQ before 4.1.2 contains an information disclosure vulnerability in the getIdFromSolutionId() method that lacks permission filtering, allowing unauthenticated at…Check if you run itEPSS 0.43%May 15, 2026
- High7.7phpMyFAQ before 4.1.2 contains a sql injection vulnerability in CurrentUser::setTokenData that allows authenticated attackers to execute arbitrary SQL by injecting mal…Check if you run itEPSS 0.36%May 15, 2026
- Medium5.3phpMyFAQ before 4.1.2 contains missing permission checks in ConfigurationTabController.php where 12 endpoints use userIsAuthenticated() instead of userHasPermission(CO…Check if you run itEPSS 0.28%May 15, 2026
- Medium5.3Mathesar is a web application that makes working with PostgreSQL databases both simple and powerful.Check if you run itEPSS 0.38%May 15, 2026
- Medium5.3Mathesar is a web application that makes working with PostgreSQL databases both simple and powerful.Check if you run itEPSS 0.38%May 15, 2026
- High8.5Rapid7 Metasploit Pro is vulnerable to a local privilege escalation attack that allows a user to gain SYSTEM level control of a Windows host.Check if you run itEPSS 0.18%May 15, 2026
- High7.5ZITADEL is an open source identity management platform.Check if you run itEPSS 0.62%May 14, 2026
- High7.1OneDev is a Git server with CI/CD, kanban, and packages.Check if you run itEPSS 0.44%May 14, 2026
- Medium6.3The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers.Check if you run itEPSS 0.29%May 14, 2026
- High8.5OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation.Check if you run itEPSS 0.19%May 14, 2026
- Medium6.0Fleet is open source device management software.Check if you run itEPSS 0.94%May 14, 2026
- Medium4.3SiYuan is an open-source personal knowledge management system.Check if you run itEPSS 0.27%May 14, 2026
- High8.3SiYuan is an open-source personal knowledge management system.Check if you run itEPSS 0.43%May 14, 2026
- Medium4.9gittuf is a platform-agnostic Git security system.Check if you run itEPSS 0.30%May 14, 2026
- Medium6.5Hatchet is a platform for orchestrating background tasks, AI agents, and durable workflows at scale.Check if you run itEPSS 0.29%May 14, 2026
- High7.1DataHub is an open-source metadata platform.Check if you run itEPSS 0.22%May 14, 2026
- High8.6Gotenberg is a Docker-powered stateless API for PDF files.Check if you run itEPSS 0.42%May 14, 2026