Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.7WPGraphQL provides a GraphQL API for WordPress sites.Check if you run itEPSS 0.94%Feb 26, 2026
- High7.5minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects.Check if you run itEPSS 0.53%Feb 26, 2026
- High7.5minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects.Check if you run itEPSS 0.58%Feb 26, 2026
- Medium5.3Svelte performance oriented web framework.Check if you run itEPSS 0.27%Feb 26, 2026
- Medium5.3Svelte performance oriented web framework.Check if you run itEPSS 0.26%Feb 26, 2026
- Medium6.9Spin is an open source developer tool for building and running serverless applications powered by WebAssembly.Check if you run itEPSS 0.26%Feb 26, 2026
- High7.7The Terraform Provider for Linode versions prior to v3.9.0 logged sensitive information including some passwords, StackScript content, and object storage data in debug logs withoutCheck if you run itEPSS 0.52%Feb 26, 2026
- High8.8WireGuard Portal (or wg-portal) is a web-based configuration portal for WireGuard server management.Check if you run itEPSS 0.35%Feb 26, 2026
- Medium4.9Bitnami Sealed Secrets is vulnerable to a scope-widening attack during the secret rotation (/v1/rotate) flow.Check if you run itEPSS 0.41%Feb 26, 2026
- High7.0The Go MCP SDK used Go's standard encoding/json.Unmarshal for JSON-RPC and MCP protocol message parsing in versions prior to 1.3.1.Check if you run itEPSS 0.29%Feb 26, 2026
- High8.9c3p0, a JDBC Connection pooling library, is vulnerable to attack via maliciously crafted Java-serialized objects and instances.Check if you run itEPSS 0.60%Feb 26, 2026
- Medium5.3NetExec is a network execution tool.Check if you run itEPSS 0.38%Feb 26, 2026
- High7.2Astro is a web framework.Check if you run itEPSS 0.32%Feb 26, 2026
- High8.2ZITADEL is an open source identity management platform.Check if you run itEPSS 0.22%Feb 26, 2026
- Low2.1ZITADEL is an open source identity management platform.Check if you run itEPSS 0.26%Feb 26, 2026
- Medium4.3ZITADEL is an open source identity management platform.Check if you run itEPSS 0.16%Feb 26, 2026
- Critical9.8Dottie provides nested object access and manipulation in JavaScript.Check if you run itEPSS 0.36%Feb 26, 2026
- High7.5rldns is an open source DNS server.Check if you run itEPSS 0.49%Feb 26, 2026
- High7.7GPAC is an open-source multimedia framework.Check if you run itEPSS 0.32%Feb 26, 2026
- Medium5.1Fleet is open source device management software.Check if you run itEPSS 0.35%Feb 26, 2026
- High8.7TerriaJS-Server is a NodeJS Express server for TerriaJS, a library for building web-based geospatial data explorers.Check if you run itEPSS 0.28%Feb 26, 2026
- High8.0Sub2API is an AI API gateway platform designed to distribute and manage API quotas from AI product subscriptions.Check if you run itEPSS 0.28%Feb 26, 2026
- High7.8An issue in fastCMS before v.0.1.6 allows a local attacker to execute arbitrary code via the PluginController.java componentCheck if you run itEPSS 0.21%Feb 26, 2026
- Medium5.4A reflected Cross-Site Scripting (XSS) vulnerability exists in the register.php backend script of PuneethReddyHC Event Management System 1.0.Check if you run itEPSS 0.22%Feb 26, 2026
- Critical9.8ZenTaoPMS v18.11 through v21.6.beta is vulnerable to Directory Traversal in /module/ai/control.php.Check if you run itEPSS 2.61%Feb 26, 2026
Sort