Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser.Check if you run itEPSS 0.37%Mar 26, 2026
- Medium6.5TSPortal is the WikiTide Foundation’s in-house platform used by the Trust and Safety team to manage reports, investigations, appeals, and transparency work.Check if you run itEPSS 0.44%Mar 26, 2026
- Medium4.3is a YAML parser and serialiser for JavaScript.Check if you run itEPSS 0.53%Mar 26, 2026
- High7.7Ruckus Unleashed contains a remote code execution vulnerability in the web-based management interface that allows authenticated remote attackers to execute arbitrary c…Check if you run itEPSS 0.52%Mar 26, 2026
- High7.5Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists.Check if you run itEPSS 0.53%Mar 26, 2026
- High8.1Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists.Check if you run itEPSS 0.38%Mar 26, 2026
- Medium6.5Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists.Check if you run itEPSS 0.48%Mar 26, 2026
- Medium6.1A cross-site scripting (XSS) vulnerability in the wff_cols_pref.css.aspx endpoint of staffwiki v7.0.1.19219 allows attackers to execute arbitrary Javascript in the con…Check if you run itEPSS 0.37%Mar 26, 2026
- Medium6.5srvx is a universal server based on web standards.Check if you run itEPSS 0.40%Mar 26, 2026
- High8.1ORY Oathkeeper is an Identity & Access Proxy (IAP) and Access Control Decision API that authorizes HTTP requests based on sets of Access Rules.Check if you run itEPSS 0.51%Mar 26, 2026
- Medium6.5ORY Oathkeeper is an Identity & Access Proxy (IAP) and Access Control Decision API that authorizes HTTP requests based on sets of Access Rules.Check if you run itEPSS 0.28%Mar 26, 2026
- Critical10.0ORY Oathkeeper is an Identity & Access Proxy (IAP) and Access Control Decision API that authorizes HTTP requests based on sets of Access Rules.Check if you run itEPSS 0.64%Mar 26, 2026
- Medium5.3H3 is a minimal H(TTP) framework.Check if you run itEPSS 0.28%Mar 26, 2026
- High7.8Firecrawl version 2.8.0 and prior contain a server-side request forgery (SSRF) protection bypass vulnerability in the Playwright scraping service where network policy…Check if you run itEPSS 0.54%Mar 26, 2026
- Medium4.9Mattermost Plugins versions <=11.4 11.0.4 11.1.3 11.3.2 10.11.11.0 fail to validate incoming request size which allows an authenticated attacker to cause service disru…Check if you run itEPSS 0.44%Mar 26, 2026
- Low2.2Mattermost Plugins versions <=11.4 10.11.11.0 fail to validate webhook request timestamps which allows an attacker to corrupt Zoom meeting state in Mattermost via repl…Check if you run itEPSS 0.31%Mar 26, 2026
- Medium4.2EVerest is an EV charging software stack.Check if you run itEPSS 0.15%Mar 26, 2026
- High7.0EVerest is an EV charging software stack.Check if you run itEPSS 0.22%Mar 26, 2026
- Medium6.9The Angular SSR is a server-rise rendering tool for Angular applications.Check if you run itEPSS 0.33%Mar 26, 2026
- Medium6.1A reflected cross-site scripting (XSS) vulnerability in the /admin/menus component of Lightcms v2.0 allows attackers to execute arbitrary Javascript in the context of…Check if you run itEPSS 0.25%Mar 26, 2026
- Medium6.1A reflected cross-site scripting (XSS) vulnerability in the /index/login.html component of YZMCMS v7.4 allows attackers to execute arbitrary Javascript in the context…Check if you run itEPSS 0.25%Mar 26, 2026
- High8.7A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.10), SICORE Base system (All versions < V26.10.0).Check if you run itEPSS 0.51%Mar 26, 2026
- High7.1A vulnerability has been identified in CPCI85 Central Processing/Communication (All versions < V26.10), RTUM85 RTU Base (All versions < V26.10).Check if you run itEPSS 0.29%Mar 26, 2026
- Medium4.3The Conditional Menus plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.6.Check if you run itEPSS 0.16%Mar 26, 2026
- High8.8OpenBiz Cubi Lite 3.0.8 contains a SQL injection vulnerability in the login form that allows unauthenticated attackers to manipulate database queries through the usern…Check if you run itEPSS 0.33%Mar 26, 2026