Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.4A flaw was found in Red Hat Quay's container image upload process.Check if you run itEPSS 0.25%Apr 8, 2026
- Critical9.8Improper Limitation of a Pathname to a Restricted Directory (CWE-22) in Logstash can lead to arbitrary file write and potentially remote code execution via Relative Path TraversalCheck if you run itEPSS 0.55%Apr 8, 2026
- High7.7Server-Side Request Forgery (CWE-918) in Kibana One Workflow can lead to information disclosure.Check if you run itEPSS 0.24%Apr 8, 2026
- Medium6.5Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130).Check if you run itEPSS 0.28%Apr 8, 2026
- Medium4.3Incorrect Authorization (CWE-863) in Kibana can lead to cross-space information disclosure via Privilege Abuse (CAPEC-122).Check if you run itEPSS 0.18%Apr 8, 2026
- Medium5.3A flaw was found in the OpenShift Mirror Registry.Check if you run itEPSS 0.29%Apr 8, 2026
- High7.7Incorrect Authorization (CWE-863) in Kibana can lead to information disclosure via Privilege Abuse (CAPEC-122).Check if you run itEPSS 0.29%Apr 8, 2026
- High7.7Execution with Unnecessary Privileges (CWE-250) in Kibana’s Fleet plugin debug route handlers can lead reading index data beyond their direct Elasticsearch RBAC scope via PrivilegeCheck if you run itEPSS 0.30%Apr 8, 2026
- Medium6.5A flaw was found in Red Hat Quay and mirror registry for Red Hat OpenShift.Check if you run itEPSS 0.41%Apr 8, 2026
- High7.5rfc3161-client is a Python library implementing the Time-Stamp Protocol (TSP) described in RFC 3161.Check if you run itEPSS 0.19%Apr 8, 2026
- High7.2An eval() injection vulnerability in the Rapid7 Insight Agent beaconing logic for Linux versions could theoretically allow an attacker to achieve remote code execution as root viaCheck if you run itEPSS 0.42%Apr 8, 2026
- Medium5.9Axios is a promise based HTTP client for the browser and Node.js.Check if you run itEPSS 0.74%Apr 8, 2026
- Medium4.8Hono is a Web application framework that provides support for any JavaScript runtime.Check if you run itEPSS 0.29%Apr 8, 2026
- Medium6.3Hono is a Web application framework that provides support for any JavaScript runtime.Check if you run itEPSS 0.35%Apr 8, 2026
- Medium5.3Hono is a Web application framework that provides support for any JavaScript runtime.Check if you run itEPSS 0.47%Apr 8, 2026
- Medium5.3@hono/node-server allows running the Hono application on Node.js.Check if you run itEPSS 0.38%Apr 8, 2026
- Critical9.8CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Check if you run itEPSS 0.53%Apr 8, 2026
- Medium4.8CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Check if you run itEPSS 0.25%Apr 8, 2026
- Medium4.8CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Check if you run itEPSS 0.24%Apr 8, 2026
- Medium4.8CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Check if you run itEPSS 0.24%Apr 8, 2026
- High8.6XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it.Check if you run itEPSS 0.55%Apr 8, 2026
- Medium5.9Hono is a Web application framework that provides support for any JavaScript runtime.Check if you run itEPSS 0.51%Apr 8, 2026
- High8.1CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Check if you run itEPSS 0.43%Apr 8, 2026
- High7.2CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Check if you run itEPSS 0.49%Apr 8, 2026
- UnknownCabal deletes project source files during configureOpen the advisoryApr 8, 2026
Sort