Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1A flaw was found in GIMP.Check if you run itEPSS 0.34%Apr 15, 2026
- Medium5.5A flaw was found in GIMP.Check if you run itEPSS 0.20%Apr 15, 2026
- High7.1A flaw was found in GIMP.Check if you run itEPSS 0.17%Apr 15, 2026
- Medium5.5A flaw was found in GIMP.Check if you run itEPSS 0.22%Apr 15, 2026
- High7.8A flaw was found in GIMP.Check if you run itEPSS 0.39%Apr 15, 2026
- Low3.3A cross-tenant isolation vulnerability was found in Grafana’s Correlations feature affecting legacy correlation records.Check if you run itEPSS 0.21%Apr 15, 2026
- Critical9.2CWE-798: Use of Hard-coded Credentials in Sonatype Nexus Repository Manager versions 3.0.0 through 3.70.5 allows an unauthenticated attacker with network access to gain unauthorizeCheck if you run itEPSS 0.55%Apr 15, 2026
- High7.4OpenProject is an open-source project management application.Check if you run itEPSS 0.31%Apr 15, 2026
- High8.6Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerability that could have resulted in arbitrary code execution in the context of the current user.Check if you run itEPSS 0.28%Apr 15, 2026
- Medium5.5A flaw was found in the System Security Services Daemon (SSSD).Check if you run itEPSS 0.16%Apr 15, 2026
- Medium4.1Weblate is a web based localization tool.Check if you run itEPSS 0.29%Apr 15, 2026
- High8.8Weblate is a web based localization tool.Check if you run itEPSS 0.41%Apr 15, 2026
- Medium5.0Weblate is a web based localization tool.Check if you run itEPSS 0.26%Apr 15, 2026
- Medium5.4A flaw was found in KubeVirt's Role-Based Access Control (RBAC) evaluation logic.Check if you run itEPSS 0.16%Apr 15, 2026
- High7.7Weblate is a web based localization tool.Check if you run itEPSS 0.48%Apr 15, 2026
- Critical9.8Slah CMS v1.5.0 and below was discovered to contain a remote code execution (RCE) vulnerability in the session() function at config.php.Check if you run itEPSS 0.53%Apr 15, 2026
- Medium5.0Weblate is a web based localization tool.Check if you run itEPSS 0.25%Apr 15, 2026
- High8.1Weblate is a web based localization tool.Check if you run itEPSS 0.72%Apr 15, 2026
- High8.4IdentityIQ 8.5, all IdentityIQ 8.5 patch levels prior to 8.5p2, IdentityIQ 8.4, and all IdentityIQ 8.4 patch levels prior to 8.4p4 allow authenticated users assigned the Debug PageCheck if you run itEPSS 0.28%Apr 15, 2026
- Medium4.3Weblate is a web based localization tool.Check if you run itEPSS 0.25%Apr 15, 2026
- Low3.1Weblate is a web based localization tool.Check if you run itEPSS 0.23%Apr 15, 2026
- Critical9.1Velociraptor versions prior to 0.76.3 contain a vulnerability in the query() plugin which allows access to all orgs with the user's current ACL token.Check if you run itEPSS 0.23%Apr 15, 2026
- High7.4Git for Windows is the Windows port of Git.Check if you run itEPSS 0.32%Apr 15, 2026
- Medium6.5JavaScript is vulnerable to prototype pollution in Mafintosh's protocol-buffers-schema Version 3.6.0, where an attacker may alter the application logic, bypass security checks, cauCheck if you run itEPSS 0.56%Apr 15, 2026
- High7.5Missing Authorization vulnerability in Plisio Accept Cryptocurrencies with Plisio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af…Check if you run itEPSS 0.20%Apr 15, 2026
Sort