Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7Bulwark Webmail is a self-hosted webmail client for Stalwart Mail Server.Check if you run itEPSS 0.26%Apr 2, 2026
- High8.7Bulwark Webmail is a self-hosted webmail client for Stalwart Mail Server.Check if you run itEPSS 0.17%Apr 2, 2026
- Medium6.5Scoold is a Q&A and a knowledge sharing platform for teams.Check if you run itEPSS 0.32%Apr 2, 2026
- High8.5NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions.Check if you run itEPSS 0.41%Apr 2, 2026
- Medium6.9Bentley Systems iTwin Platform exposed a Cesium ion access token in the source of some web pages.Check if you run itEPSS 0.29%Apr 2, 2026
- Low2.7Ella Core is a 5G core designed for private networks.Check if you run itEPSS 0.19%Apr 2, 2026
- Medium6.5Ella Core is a 5G core designed for private networks.Check if you run itEPSS 0.33%Apr 2, 2026
- Low2.0A security flaw has been discovered in Shinrays Games Goods Triple App up to 1.200.Check if you run itEPSS 0.10%Apr 2, 2026
- High7.1vLLM is an inference and serving engine for large language models (LLMs).Check if you run itEPSS 0.28%Apr 2, 2026
- Critical9.2OneUptime is an open-source monitoring and observability platform.Check if you run itEPSS 0.56%Apr 2, 2026
- High8.1OneUptime is an open-source monitoring and observability platform.Check if you run itEPSS 0.27%Apr 2, 2026
- Critical9.2OneUptime is an open-source monitoring and observability platform.Check if you run itEPSS 0.61%Apr 2, 2026
- Critical9.1OneUptime is an open-source monitoring and observability platform.Check if you run itEPSS 0.35%Apr 2, 2026
- High8.7Haraka is a Node.js mail server.Check if you run itEPSS 0.44%Apr 2, 2026
- Critical9.1Fireshare facilitates self-hosted media and link sharing.Check if you run itEPSS 0.63%Apr 2, 2026
- High7.1Unsanitized input during web page generation in the Kiro Agent webview in Kiro IDE before version 0.8.140 allows a remote unauthenticated threat actor to execute arbitrary code viaCheck if you run itEPSS 0.16%Apr 2, 2026
- Medium5.3XZ Utils provide a general-purpose data-compression library plus command-line tools.Check if you run itEPSS 0.53%Apr 2, 2026
- High7.6The Go MCP SDK used Go's standard encoding/json.Check if you run itEPSS 0.47%Apr 2, 2026
- Medium6.9A vulnerability was identified in appsmithorg appsmith up to 1.97.Check if you run itEPSS 0.31%Apr 2, 2026
- Medium5.3Open edX Platform enables the authoring and delivery of online learning at any scale.Check if you run itEPSS 0.22%Apr 2, 2026
- Low3.3A type confusion issue was addressed with improved memory handling.Check if you run itEPSS 0.18%Apr 2, 2026
- High8.7HiSecOS web server versions 03.4.00 prior to 04.1.00 contains a privilege escalation vulnerability that allows authenticated users with operator or auditor roles to escalate privilCheck if you run itEPSS 0.28%Apr 2, 2026
- High8.7This issue was addressed with improved handling of symlinks.Check if you run itEPSS 0.18%Apr 2, 2026
- Medium6.9OpenClaw versions prior to commit b57b680 contain an approval bypass vulnerability due to inconsistent environment variable normalization between approval and execution paths, alloCheck if you run itEPSS 0.27%Apr 2, 2026
- High8.7The Hytale Modding Wiki is a free service for Hytale mods to host their documentation & wikis.Check if you run itEPSS 0.29%Apr 2, 2026
Sort