Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.Check if you run itEPSS 0.56%Apr 10, 2026
- Medium5.4User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.Check if you run itEPSS 0.32%Apr 10, 2026
- Low3.7phpseclib is a PHP secure communications library.Check if you run itEPSS 0.37%Apr 10, 2026
- Medium6.8ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies.Check if you run itEPSS 0.11%Apr 10, 2026
- Medium6.3The frontend gRPC server's streaming interceptor chain did not include the authorization interceptor.Check if you run itEPSS 0.61%Apr 10, 2026
- High7.5CGA-xr8q-wq24-w4g4Open the advisoryApr 10, 2026
- High7.5CGA-fp7m-c7j5-m5wrOpen the advisoryApr 10, 2026
- Medium5.3FastGPT is an AI Agent building platform.Check if you run itEPSS 0.35%Apr 10, 2026
- High7.5CGA-gxxr-7vcj-3rr2Open the advisoryApr 10, 2026
- Medium5.5CGA-j5g3-vvfc-ph3gOpen the advisoryApr 10, 2026
- High7.2Arcane is an interface for managing Docker containers, images, networks, and volumes.Patch nowKEVEPSS 0.62%Apr 10, 2026
- Medium6.5TREK is a collaborative travel planner.Check if you run itEPSS 0.21%Apr 10, 2026
- High7.8Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts.Check if you run itEPSS 0.25%Apr 10, 2026
- Medium5.3GeoNode versions 4.4.5 and 5.0.2 (and prior within their respective releases) contain a server-side request forgery vulnerability in the service registration endpoint that allows aCheck if you run itEPSS 0.18%Apr 10, 2026
- Medium5.3GeoNode versions 4.0 before 4.4.5 and 5.0 before 5.0.2 contain a server-side request forgery vulnerability that allows authenticated users with document upload permissions to triggCheck if you run itEPSS 0.23%Apr 10, 2026
- Medium5.3xrootd has path traversal in directory listing that allows access to the parent directory via trailing ".." patternCheck if you run itEPSS 0.34%Apr 10, 2026
- Critical9.8LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform.Check if you run itEPSS 0.33%Apr 10, 2026
- Critical9.3goshs is a SimpleHTTPServer written in Go.Check if you run itEPSS 0.67%Apr 10, 2026
- High7.7goshs is a SimpleHTTPServer written in Go.Check if you run itEPSS 0.32%Apr 10, 2026
- LowREDAXO has reflected XSS backend packages API via function parameter (CSRF token required)Check if you run itEPSS 0.18%Apr 10, 2026
- LowREDAXO has reflected XSS in backend Metainfo API via type parameter (CSRF token required)Check if you run itEPSS 0.18%Apr 10, 2026
- Medium5.3TREK is a collaborative travel planner.Check if you run itEPSS 0.24%Apr 10, 2026
- High8.7uv vulnerable to arbitrary file deletion through RECORD entriesCheck if you run itEPSS 0.35%Apr 10, 2026
- High7.7Quarkus OpenAPI Generator is Quarkus' extensions for generation of Rest Clients and server stubs generation.Check if you run itEPSS 0.40%Apr 10, 2026
- Medium6.9ajenti.plugin.core defines all necessary core elements to allow Ajenti to run properly.Check if you run itEPSS 0.24%Apr 10, 2026
Sort