Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7Fleet is open source device management software.Check if you run itEPSS 0.46%Mar 27, 2026
- Medium6.0Fleet is open source device management software.Check if you run itEPSS 0.36%Mar 27, 2026
- High8.2WWBN AVideo is an open source video platform.Check if you run itEPSS 0.31%Mar 27, 2026
- Critical9.1WWBN AVideo is an open source video platform.Check if you run itEPSS 0.36%Mar 27, 2026
- Medium6.3Wazuh provisioning scripts and Dockerfiles contain an insecure transport vulnerability where curl is invoked with the -k/--insecure flag, disabling SSL/TLS certificate validation.Check if you run itEPSS 0.22%Mar 27, 2026
- Medium6.1A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0 in the view_product.php file via the "limit" parameter.Check if you run itEPSS 0.29%Mar 27, 2026
- Medium5.3WWBN AVideo is an open source video platform.Check if you run itEPSS 0.40%Mar 27, 2026
- Medium5.3WWBN AVideo is an open source video platform.Check if you run itEPSS 0.24%Mar 27, 2026
- Medium5.3WWBN AVideo is an open source video platform.Check if you run itEPSS 0.34%Mar 27, 2026
- Medium6.5Dolibarr is an enterprise resource planning (ERP) and customer relationship management (CRM) software package.Check if you run itEPSS 1.46%Mar 27, 2026
- High8.3Wazuh version 4.12.0 contains an exposure vulnerability in GitHub Actions workflow artifacts that allows attackers to extract the GITHUB_TOKEN from uploaded artifacts.Check if you run itEPSS 0.40%Mar 27, 2026
- Medium5.3A vulnerability was determined in SourceCodester Diary App 1.0.Check if you run itEPSS 0.21%Mar 27, 2026
- Medium5.3A flaw has been found in itsourcecode Free Hotel Reservation System 1.0.Check if you run itEPSS 0.27%Mar 27, 2026
- Medium6.9A vulnerability was detected in letta-ai letta 0.16.4.Check if you run itEPSS 0.64%Mar 27, 2026
- Medium5.3A security vulnerability has been detected in letta-ai letta 0.16.4.Check if you run itEPSS 0.34%Mar 27, 2026
- Medium5.3A weakness has been identified in huggingface smolagents 1.25.0.dev0.Check if you run itEPSS 0.60%Mar 27, 2026
- High7.3A security flaw has been discovered in UltraVNC up to 1.6.4.0.Check if you run itEPSS 0.24%Mar 27, 2026
- Medium5.4WWBN AVideo is an open source video platform.Check if you run itEPSS 0.26%Mar 27, 2026
- Medium5.4WWBN AVideo is an open source video platform.Check if you run itEPSS 0.25%Mar 27, 2026
- High7.1Wazuh wazuh-agent and wazuh-manager versions 2.1.0 before 4.8.0 contain multiple shell injection and untrusted search path vulnerabilities that allow attackers to execute arbitraryCheck if you run itEPSS 1.73%Mar 27, 2026
- Medium6.3WWBN AVideo is an open source video platform.Check if you run itEPSS 0.26%Mar 27, 2026
- Critical9.1WWBN AVideo is an open source video platform.Check if you run itEPSS 0.15%Mar 27, 2026
- Medium6.9Appsmith versions prior to 1.98 expose sensitive instance management API endpoints without authentication.Check if you run itEPSS 0.40%Mar 27, 2026
- Medium6.9Wazuh Manager authd service in wazuh-manager packages through version 4.7.3 contains an improper restriction of client-initiated SSL/TLS renegotiation vulnerability that allows remCheck if you run itEPSS 0.53%Mar 27, 2026
- High8.1In the latest version of mlflow/mlflow, when the app is enabled, tracing and assessment endpoints are not protected by permission validators.Check if you run itEPSS 0.35%Mar 27, 2026
Sort