Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.5 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have allowed an…Check if you run itEPSS 0.85%Mar 25, 2026
- Medium4.3GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.10 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have allowed an…Check if you run itEPSS 0.33%Mar 25, 2026
- Medium6.9NiceGUI is a Python-based UI framework.Check if you run itEPSS 0.69%Mar 24, 2026
- Medium6.5pyLoad is a free and open-source download manager written in Python.Check if you run itEPSS 0.18%Mar 24, 2026
- Critical9.1Astro is a web framework.Check if you run itEPSS 0.50%Mar 24, 2026
- Low2.1Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.29%Mar 24, 2026
- High8.7Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.75%Mar 24, 2026
- High8.2Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.62%Mar 24, 2026
- High8.7Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.62%Mar 24, 2026
- High7.5Astro is a web framework.Check if you run itEPSS 0.43%Mar 24, 2026
- High8.3Wallos is an open-source, self-hostable personal subscription tracker.Check if you run itEPSS 0.53%Mar 24, 2026
- High7.7Wallos is an open-source, self-hostable personal subscription tracker.Check if you run itEPSS 0.40%Mar 24, 2026
- Medium6.3LibVNCServer versions 0.9.15 and prior (fixed in commit dc78dee) contain null pointer dereference vulnerabilities in the HTTP proxy handlers within httpProcessInput()…Check if you run itEPSS 5.32%Mar 24, 2026
- Critical9.1LoLLMs WEBUI provides the Web user interface for Lord of Large Language and Multi modal Systems.Check if you run itEPSS 1.66%Mar 24, 2026
- High7.4Vikunja is an open-source self-hosted task management platform.Check if you run itEPSS 0.45%Mar 24, 2026
- Medium6.5Vikunja is an open-source self-hosted task management platform.Check if you run itEPSS 0.42%Mar 24, 2026
- Medium5.4Vikunja is an open-source self-hosted task management platform.Check if you run itEPSS 0.39%Mar 24, 2026
- Medium6.5Vikunja is an open-source self-hosted task management platform.Check if you run itEPSS 0.92%Mar 24, 2026
- Medium5.4JiZhiCMS v2.5.6 and before contains a Stored Cross-Site Scripting (XSS) vulnerability in the release function within app/home/c/UserController.php.Check if you run itEPSS 0.28%Mar 24, 2026
- High8.8DedeCMS v5.7.118 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability in /sys_task_add.php.Check if you run itEPSS 0.21%Mar 24, 2026
- High7.5ipmi-oem in FreeIPMI before 1.6.17 has exploitable buffer overflows on response messages.Check if you run itEPSS 0.40%Mar 24, 2026
- High8.1Vikunja is an open-source self-hosted task management platform.Check if you run itEPSS 0.44%Mar 24, 2026
- Medium6.5ConcreteCMS v9.4.7 contains a Denial of Service (DoS) vulnerability in the File Manager component.Check if you run itEPSS 0.44%Mar 24, 2026
- Medium6.3NGINX Plus and NGINX Open Source have a vulnerability in the ngx_mail_smtp_module module due to the improper handling of CRLF sequences in DNS responses.Check if you run itEPSS 0.26%Mar 24, 2026
- High8.7When the ngx_mail_auth_http_module module is enabled on NGINX Plus or NGINX Open Source, undisclosed requests can cause worker processes to terminate.Check if you run itEPSS 0.94%Mar 24, 2026