Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3Centrifugo is an open-source scalable real-time messaging server.Check if you run itEPSS 0.37%Mar 13, 2026
- Medium6.5LibreChat is a ChatGPT clone with additional features.Check if you run itEPSS 0.47%Mar 13, 2026
- High7.6Dagu is a workflow engine with a built-in Web user interface.Check if you run itEPSS 0.50%Mar 13, 2026
- High7.5Dagu is a workflow engine with a built-in Web user interface.Check if you run itEPSS 0.77%Mar 13, 2026
- Medium5.0JumpServer is an open source bastion host and an operation and maintenance security audit system.Check if you run itEPSS 0.13%Mar 13, 2026
- Medium4.3Gokapi is a self-hosted file sharing server with automatic expiration and encryption support.Check if you run itEPSS 0.29%Mar 13, 2026
- Medium6.5Gokapi is a self-hosted file sharing server with automatic expiration and encryption support.Check if you run itEPSS 0.30%Mar 13, 2026
- Medium6.5Issue summary: An OpenSSL TLS 1.3 server may fail to negotiate the expected preferred key exchange group when its key exchange group configuration includes the default…Check if you run itEPSS 0.51%Mar 13, 2026
- High7.5HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and Cosy+ with firmware 23.xx before 23.0s3 allows unauthenticated attack…Check if you run itEPSS 0.65%Mar 13, 2026
- High7.0Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in Erlang OTP (inets httpd module) allows HTTP Request Smuggling.Check if you run itEPSS 0.47%Mar 13, 2026
- Medium6.9wpDiscuz before 7.6.47 contains a missing rate limiting vulnerability that allows unauthenticated attackers to subscribe arbitrary email addresses to post notification…Check if you run itEPSS 0.33%Mar 13, 2026
- Medium5.3wpDiscuz before 7.6.47 contains a cross-site request forgery vulnerability in the getFollowsPage() function that allows attackers to trigger unauthorized actions witho…Check if you run itEPSS 0.16%Mar 13, 2026
- Medium6.1wpDiscuz before 7.6.47 contains a cross-site request forgery vulnerability that allows attackers to delete all comments associated with an email address by crafting a…Check if you run itEPSS 0.17%Mar 13, 2026
- Medium4.3The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions u…Check if you run itEPSS 0.22%Mar 13, 2026
- High7.7The web interface on multiple Omada switches does not adequately validate certain external inputs, which may lead to out-of-bound memory access when processing crafted requests.Check if you run itEPSS 1.02%Mar 13, 2026
- Medium6.3Malicious configuration can lead to unauthorized file access in Apache Livy.Check if you run itEPSS 0.50%Mar 13, 2026
- Medium5.9IBM Sterling Partner Engagement Manager 6.2.3.0 through 6.2.3.5 and 6.2.4.0 through 6.2.4.2 could allow an attacker to obtain sensitive information from the query stri…Check if you run itEPSS 0.21%Mar 13, 2026
- Medium5.9This is an uncontrolled resource consumption vulnerability (CWE-400) that can lead to Denial of Service (DoS).Check if you run itEPSS 0.74%Mar 12, 2026
- Medium4.6ImpactWhen an application passes user-controlled input to the upgrade option of client.request(), an attacker can inject CRLF sequences (\r\n) to: * Inject arbitrary H…Check if you run itEPSS 0.28%Mar 12, 2026
- Medium6.3Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.41%Mar 12, 2026
- Critical9.3Tolgee is an open-source localization platform.Check if you run itEPSS 0.44%Mar 12, 2026
- Critical9.3Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.95%Mar 12, 2026
- Medium6.3Cap'n Proto is a data interchange format and capability-based RPC system.Check if you run itEPSS 0.21%Mar 12, 2026
- Medium6.3Cap'n Proto is a data interchange format and capability-based RPC system.Check if you run itEPSS 0.21%Mar 12, 2026
- Critical9.8Undici allows duplicate HTTP Content-Length headers when they are provided in an array with case-variant names (e.g., Content-Length and content-length).Check if you run itEPSS 0.51%Mar 12, 2026