Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.3changedetection.io is a free open source web page change detection tool.Check if you run itEPSS 0.49%Mar 27, 2026
- High8.3Azure Data Explorer MCP Server is a Model Context Protocol (MCP) server that enables AI assistants to execute KQL queries and explore Azure Data Explorer (ADX/Kusto) databases throCheck if you run itEPSS 0.41%Mar 27, 2026
- High8.2Express XSS Sanitizer is Express 4.x and 5.x middleware which sanitizes user input data (in req.body, req.query, req.headers and req.params) to prevent Cross Site Scripting (XSS) aCheck if you run itEPSS 0.40%Mar 27, 2026
- High8.6Notesnook is a note-taking app.Check if you run itEPSS 0.36%Mar 27, 2026
- Medium6.9A security vulnerability has been detected in chatwoot up to 4.11.1.Check if you run itEPSS 0.36%Mar 27, 2026
- Medium6.3A security flaw has been discovered in Open5GS 2.7.6.Check if you run itEPSS 0.59%Mar 27, 2026
- Medium5.3A vulnerability was identified in dloebl CGIF up to 0.5.2.Check if you run itEPSS 0.51%Mar 27, 2026
- Critical9.7Notesnook is a note-taking app.Check if you run itEPSS 0.73%Mar 27, 2026
- Medium6.5LinkAce is a self-hosted archive to collect website links.Check if you run itEPSS 0.33%Mar 27, 2026
- High8.5LinkAce is a self-hosted archive to collect website links.Check if you run itEPSS 0.29%Mar 27, 2026
- High7.8Substance3D - Stager versions 3.1.7 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.Check if you run itEPSS 0.23%Mar 27, 2026
- High8.2MCP Ruby SDK is the official Ruby SDK for Model Context Protocol servers and clients.Check if you run itEPSS 0.48%Mar 27, 2026
- High7.7UniFi Network Controller before version 5.10.22 and 5.11.x before 5.11.18 contains an improper certificate verification vulnerability that allows adjacent network attackers to condCheck if you run itEPSS 0.12%Mar 27, 2026
- High7.8Gematik Authenticator securely authenticates users for login to digital health applications.Check if you run itEPSS 0.29%Mar 27, 2026
- High7.5Happy DOM is a JavaScript implementation of a web browser without its graphical user interface.Check if you run itEPSS 0.48%Mar 27, 2026
- Critical9.0Ubiquiti UniFi Network Controller prior to 5.10.12 (excluding 5.6.42), UAP FW prior to 4.0.6, UAP-AC, UAP-AC v2, and UAP-AC Outdoor FW prior to 3.8.17, USW FW prior to 4.0.6, USG FCheck if you run itEPSS 0.08%Mar 27, 2026
- Critical9.8Happy DOM is a JavaScript implementation of a web browser without its graphical user interface.Check if you run itEPSS 0.66%Mar 27, 2026
- High8.3Handlebars provides the power necessary to let users build semantic templates.Check if you run itEPSS 0.30%Mar 27, 2026
- High8.1Handlebars provides the power necessary to let users build semantic templates.Check if you run itEPSS 0.73%Mar 27, 2026
- High7.5Handlebars provides the power necessary to let users build semantic templates.Check if you run itEPSS 0.64%Mar 27, 2026
- High8.1Handlebars provides the power necessary to let users build semantic templates.Check if you run itEPSS 0.74%Mar 27, 2026
- Critical9.8Handlebars provides the power necessary to let users build semantic templates.Check if you run itEPSS 1.95%Mar 27, 2026
- Medium4.7Handlebars provides the power necessary to let users build semantic templates.Check if you run itEPSS 0.29%Mar 27, 2026
- Medium6.5Ella Core is a 5G core designed for private networks.Check if you run itEPSS 0.23%Mar 27, 2026
- High7.2Ella Core is a 5G core designed for private networks.Check if you run itEPSS 0.40%Mar 27, 2026
Sort