Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.7DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem.Check if you run itEPSS 0.28%Jan 27, 2026
- High7.7DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem.Check if you run itEPSS 0.26%Jan 27, 2026
- High7.7DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem.Check if you run itEPSS 0.21%Jan 27, 2026
- High8.8OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.40%Jan 27, 2026
- High7.1OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.40%Jan 27, 2026
- Medium5.9In Bun before 1.3.5, the default trusted dependencies list (aka trust allow list) can be spoofed by a non-npm package in the case of a matching name (for file, link, git, or githubCheck if you run itEPSS 0.12%Jan 27, 2026
- Medium5.9vlt before 1.0.0-rc.10 mishandles path sanitization for tar, leading to path traversal during extraction.Check if you run itEPSS 0.19%Jan 27, 2026
- High7.5soroban-fixed-point-math is a fixed-point math library for Soroban smart contacts.Check if you run itEPSS 0.40%Jan 27, 2026
- High7.1vLLM is an inference and serving engine for large language models (LLMs).Check if you run itEPSS 0.58%Jan 27, 2026
- Critical9.8RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine.Check if you run itEPSS 1.43%Jan 27, 2026
- High7.8PHPUnit is a testing framework for PHP.Check if you run itEPSS 0.38%Jan 27, 2026
- Medium6.9Kargo manages and automates the promotion of software artifacts.Check if you run itEPSS 0.39%Jan 27, 2026
- High8.7Dozzle is a realtime log viewer for docker containers.Check if you run itEPSS 0.42%Jan 27, 2026
- High8.5Quick 'n Easy FTP Service 3.2 contains an unquoted service path vulnerability that allows local attackers to execute arbitrary code during service startup.Check if you run itEPSS 0.18%Jan 27, 2026
- High8.5Atheros Coex Service Application 8.0.0.255 contains an unquoted service path vulnerability in its Windows service configuration.Check if you run itEPSS 0.18%Jan 27, 2026
- Medium5.1Froxlor Server Management Panel 0.10.16 contains a persistent cross-site scripting vulnerability in customer registration input fields.Check if you run itEPSS 0.34%Jan 27, 2026
- High8.5Wondershare Driver Install Service contains an unquoted service path vulnerability in the ElevationService executable that allows local attackers to potentially inject malicious coCheck if you run itEPSS 0.21%Jan 27, 2026
- High8.5Acer Global Registration Service 1.0.0.3 contains an unquoted service path vulnerability in its service configuration that allows local users to potentially execute arbitrary code.Check if you run itEPSS 0.18%Jan 27, 2026
- High8.5EPSON Status Monitor 3 version 8.0 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code by exploiting the service binarCheck if you run itEPSS 0.18%Jan 27, 2026
- High8.5Realtek Andrea RT Filters 1.0.64.7 contains an unquoted service path vulnerability that allows local users to potentially execute arbitrary code with elevated system privileges.Check if you run itEPSS 0.18%Jan 27, 2026
- High8.4In GnuPG before 2.5.17, a stack-based buffer overflow exists in tpm2daemon during handling of the PKDECRYPT command for TPM-backed RSA and ECC keys.Check if you run itEPSS 0.44%Jan 27, 2026
- High8.1In GnuPG before 2.5.17, a crafted CMS (S/MIME) EnvelopedData message carrying an oversized wrapped session key can cause a stack-based buffer overflow in gpg-agent during PKDECRYPTCheck if you run itEPSS 1.81%Jan 27, 2026
- Medium6.4The AI Engine plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.3.2 via the 'get_audio' function.Check if you run itEPSS 0.21%Jan 27, 2026
- High7.5A vulnerability in the web-based management interface of HPE Aruba Networking Fabric Composer could allow an unauthenticated remote attacker to view some system files.Check if you run itEPSS 0.71%Jan 27, 2026
- High7.2Insecure file operations in HPE Aruba Networking Fabric Composer’s backup functionality could allow authenticated attackers to achieve remote code execution.Check if you run itEPSS 0.86%Jan 27, 2026
Sort