Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.7Appsmith is a platform to build admin panels, internal tools, and dashboards.Check if you run itEPSS 0.39%Jan 12, 2026
- Medium5.4WebErpMesv2 is a Resource Management and Manufacturing execution system Web for industry.Check if you run itEPSS 0.27%Jan 12, 2026
- High8.2WebErpMesv2 is a Resource Management and Manufacturing execution system Web for industry.Check if you run itEPSS 0.59%Jan 12, 2026
- Critical9.3A vulnerability has been identified in the ServiceNow AI Platform that could enable an unauthenticated user to impersonate another user and perform the operations that the impersonCheck this weekEPSS 53.19%Jan 12, 2026
- High7.3Gin-vue-admin is a backstage management system based on vue and gin.Check if you run itEPSS 1.09%Jan 12, 2026
- Medium5.8Fulcio is a certificate authority for issuing code signing certificates for an OpenID Connect (OIDC) identity.Check if you run itEPSS 0.23%Jan 12, 2026
- Critical9.3orval generates type-safe JS clients (TypeScript) from any valid OpenAPI v3 or Swagger v2 specification.Check if you run itEPSS 0.78%Jan 12, 2026
- Low2.3Lychee is a free, open-source photo-management tool.Check if you run itEPSS 0.27%Jan 12, 2026
- High8.7Enhancesoft osTicket versions 1.18.x prior to 1.18.3 and 1.17.x prior to 1.17.7 contain an arbitrary file read vulnerability in the ticket PDF export functionality.Check this weekEPSS 73.59%Jan 12, 2026
- Critical9.6Iris is a web collaborative platform that helps incident responders share technical details during investigations.Check if you run itEPSS 0.36%Jan 12, 2026
- Critical10.0TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32.Check if you run itEPSS 2.44%Jan 12, 2026
- High8.7cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.Check if you run itEPSS 0.41%Jan 12, 2026
- High8.8Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway.Check if you run itEPSS 0.62%Jan 12, 2026
- Critical9.1LibreChat is a ChatGPT clone with additional features.Check if you run itEPSS 4.22%Jan 12, 2026
- Medium5.3wlc is a Weblate command-line client using Weblate's REST API.Check if you run itEPSS 0.19%Jan 12, 2026
- Low2.5wlc is a Weblate command-line client using Weblate's REST API.Check if you run itEPSS 0.15%Jan 12, 2026
- High8.6Label Studio is a multi-type data labeling and annotation tool.Check if you run itEPSS 0.28%Jan 12, 2026
- Medium6.5Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite.Check if you run itEPSS 0.40%Jan 12, 2026
- Medium6.5Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite.Check if you run itEPSS 0.38%Jan 12, 2026
- Medium5.5Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite.Check if you run itEPSS 0.16%Jan 12, 2026
- Medium6.4Espressif ESP-IDF USB Host HID (Human Interface Device) Driver allows access to HID devices.Check if you run itEPSS 0.16%Jan 12, 2026
- Medium6.8Espressif ESP-IDF USB Host HID (Human Interface Device) Driver allows access to HID devices.Check if you run itEPSS 0.22%Jan 12, 2026
- Medium6.9ONTAP versions 9.16.1 prior to 9.16.1P9 and 9.17.1 prior to 9.17.1P2 with snapshot locking enabled are susceptible to a vulnerability which could allow a privileged remote attackerCheck if you run itEPSS 0.22%Jan 12, 2026
- Medium6.8Espressif ESP-IDF USB Host UVC Class Driver allows video streaming from USB cameras.Check if you run itEPSS 0.25%Jan 12, 2026
- Critical9.1mindsdb mindsdb Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 20.26%Jan 12, 2026
Sort