Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.3SiYuan is a personal knowledge management system.Check if you run itEPSS 0.40%Mar 11, 2026
- Medium5.4StudioCMS is a server-side-rendered, Astro native, headless content management system.Check if you run itEPSS 0.31%Mar 11, 2026
- High8.6Plunk is an open-source email platform built on top of AWS SES.Check if you run itEPSS 0.45%Mar 11, 2026
- Critical9.3xygeni-action is the GitHub Action for Xygeni Scanner.Check if you run itEPSS 0.86%Mar 11, 2026
- Medium5.3Quill provides simple mac binary signing and notarization from any platform.Check if you run itEPSS 0.12%Mar 11, 2026
- Medium6.3Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.42%Mar 11, 2026
- High8.7Black is the uncompromising Python code formatter.Check if you run itEPSS 0.66%Mar 11, 2026
- Critical9.8WeGIA is a web manager for charitable institutions.Check if you run itEPSS 0.52%Mar 11, 2026
- Critical9.8Runtipi is a personal homeserver orchestrator.Check if you run itEPSS 0.69%Mar 11, 2026
- Medium5.1Frappe is a full-stack web application framework.Check if you run itEPSS 0.24%Mar 11, 2026
- Medium5.0Frappe is a full-stack web application framework.Check if you run itEPSS 0.30%Mar 11, 2026
- Critical9.3Frappe is a full-stack web application framework.Check if you run itEPSS 0.49%Mar 11, 2026
- Critical9.8Taskosaur is an open source project management platform with conversational AI for task execution in-app.Check if you run itEPSS 0.70%Mar 11, 2026
- Critical9.3SAPIDO RB-1732 V2.0.43 contains a remote command execution vulnerability that allows unauthenticated attackers to execute arbitrary system commands by submitting malic…Check if you run itEPSS 8.04%Mar 11, 2026
- High8.8Varient 1.6.1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the user_id parameter.Check if you run itEPSS 0.34%Mar 11, 2026
- High8.7IntelBras Telefone IP TIP200 and 200 LITE contain an unauthenticated arbitrary file read vulnerability in the dumpConfigFile function accessible via the cgiServer.exx endpoint.Check if you run itEPSS 0.31%Mar 11, 2026
- High8.7eWON Firmware versions 12.2 to 13.0 contain an authentication bypass vulnerability that allows attackers with minimal privileges to retrieve sensitive user data by exp…Check if you run itEPSS 0.40%Mar 11, 2026
- Critical9.3NetGain EM Plus 10.1.68 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary system commands by submitting malicio…Check if you run itEPSS 0.77%Mar 11, 2026
- High8.7Hisilicon HiIpcam V100R003 contains a directory traversal vulnerability that allows unauthenticated attackers to access sensitive configuration files by exploiting dir…Check if you run itEPSS 0.51%Mar 11, 2026
- Critical9.3Epross AVCON6 systems management platform contains an object-graph navigation language (OGNL) injection vulnerability that allows unauthenticated attackers to execute…Check if you run itEPSS 0.40%Mar 11, 2026
- Critical9.3Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.57%Mar 11, 2026
- Medium6.3Craft Commerce is an ecommerce platform for Craft CMS.Check if you run itEPSS 0.33%Mar 11, 2026
- High7.5flagd is a feature flag daemon with a Unix philosophy.Check if you run itEPSS 0.60%Mar 11, 2026
- Critical9.3Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.57%Mar 11, 2026
- Critical9.8Jellyfin is an open-source media system.Check if you run itEPSS 0.65%Mar 11, 2026