Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser.Check if you run itEPSS 0.33%Mar 26, 2026
- Medium4.3PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser.Check if you run itEPSS 0.29%Mar 26, 2026
- High7.1The vulnerability exists in the UPnP component of TL-WR841N v14, where improper input validation leads to an out-of-bounds read, potentially causing a crash of the UPnP service.Check if you run itEPSS 0.35%Mar 26, 2026
- Medium5.5PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser.Check if you run itEPSS 0.26%Mar 26, 2026
- Medium6.5MobSF is a mobile application security testing tool used.Check if you run itEPSS 0.29%Mar 26, 2026
- Medium4.3iCalendar is a Ruby library for dealing with iCalendar files in the iCalendar format defined by RFC-5545.Check if you run itEPSS 0.26%Mar 26, 2026
- Medium6.5TSPortal is the WikiTide Foundation’s in-house platform used by the Trust and Safety team to manage reports, investigations, appeals, and transparency work.Check if you run itEPSS 0.31%Mar 26, 2026
- Medium4.8Lychee is a free, open-source photo-management tool.Check if you run itEPSS 0.23%Mar 26, 2026
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in Drupal Automated Logout allows Cross Site Request Forgery.This issue affects Automated Logout: from 0.0.0 before 1.7.0, from 2.0.Check if you run itEPSS 0.12%Mar 26, 2026
- High7.5Incorrect Authorization vulnerability in Drupal Unpublished Node Permissions allows Forceful Browsing.This issue affects Unpublished Node Permissions: from 0.0.0 before 1.7.0.Check if you run itEPSS 0.25%Mar 26, 2026
- High7.5Incorrect Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Resource Injection.This issue affects AI (Artificial Intelligence): from 0.0.0 before 1.1.11, frCheck if you run itEPSS 0.25%Mar 26, 2026
- Low3.3A flaw was found in libssh where it can attempt to open arbitrary files during configuration parsing.Check if you run itEPSS 0.17%Mar 26, 2026
- Medium5.5A flaw was found in libssh.Check if you run itEPSS 0.24%Mar 26, 2026
- Low3.1A flaw was found in libssh in which a malicious SFTP (SSH File Transfer Protocol) server can exploit this by sending a malformed 'longname' field within an message during a file liCheck if you run itEPSS 0.47%Mar 26, 2026
- High8.2A flaw was found in libssh.Check if you run itEPSS 0.62%Mar 26, 2026
- Medium6.3A malicious SCP server can send unexpected paths that could make the client application override local files outside of working directory.Check if you run itEPSS 0.43%Mar 26, 2026
- Medium5.4A vulnerability has been discovered in Grafana OSS where an authorization bypass in the provisioning contact points API allows users with Editor role to modify protected webhook URCheck if you run itEPSS 0.28%Mar 26, 2026
- Medium6.5The Grafana MSSQL data source plugin contains a logic flaw that allows a low-privileged user (Viewer) to bypass API restrictions and trigger a catastrophic Out-Of-Memory (OOM) memoCheck if you run itEPSS 0.46%Mar 26, 2026
- Low2.3Lychee is a free, open-source photo-management tool.Check if you run itEPSS 0.24%Mar 26, 2026
- Medium4.2Improper Handling of Case Sensitivity vulnerability in Drupal OpenID Connect / OAuth client allows Privilege Escalation.This issue affects OpenID Connect / OAuth client: from 0.0.0Check if you run itEPSS 0.14%Mar 26, 2026
- Medium6.5Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal OpenID Connect / OAuth client allows Authentication Bypass.This issue affects OpenID Connect / OAutCheck if you run itEPSS 0.26%Mar 26, 2026
- Medium4.3Server-Side Request Forgery (SSRF) vulnerability in Drupal OpenID Connect / OAuth client allows Server Side Request Forgery.This issue affects OpenID Connect / OAuth client: from 0Check if you run itEPSS 0.17%Mar 26, 2026
- Medium6.1Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Google Analytics GA4 allows Cross-Site Scripting (XSS).This issue affecCheck if you run itEPSS 0.26%Mar 26, 2026
- Medium6.1Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Calculation Fields allows Cross-Site Scripting (XSS).This issue affectsCheck if you run itEPSS 0.26%Mar 26, 2026
- Medium6.5Missing Authentication for Critical Function vulnerability in Drupal AJAX Dashboard allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AJAXCheck if you run itEPSS 0.26%Mar 26, 2026
Sort