Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Incorrect Authorization vulnerability in Drupal File Access Fix (deprecated) allows Forceful Browsing.This issue affects File Access Fix (deprecated): from 0.0.0 before 1.2.0.Check if you run itEPSS 0.27%Mar 26, 2026
- Medium5.3Incorrect Authorization vulnerability in Drupal File Access Fix (deprecated) allows Forceful Browsing.This issue affects File Access Fix (deprecated): from 0.0.0 before 1.2.0.Check if you run itEPSS 0.20%Mar 26, 2026
- High7.5A flaw was found in p11-kit.Check if you run itEPSS 1.34%Mar 26, 2026
- Medium5.3Lychee is a free, open-source photo-management tool.Check if you run itEPSS 0.28%Mar 26, 2026
- Medium6.5A flaw was found in GIMP.Check if you run itEPSS 0.52%Mar 26, 2026
- Medium6.5A flaw was found in GIMP.Check if you run itEPSS 0.89%Mar 26, 2026
- Medium5.5A flaw was found in GIMP's PSP (Paint Shop Pro) file parser.Check if you run itEPSS 0.53%Mar 26, 2026
- Medium5.1ImageMagick is free and open-source software used for editing and manipulating digital images.Check if you run itEPSS 0.14%Mar 26, 2026
- Medium5.5ImageMagick is free and open-source software used for editing and manipulating digital images.Check if you run itEPSS 0.15%Mar 26, 2026
- Medium4.3is a YAML parser and serialiser for JavaScript.Check if you run itEPSS 0.50%Mar 26, 2026
- High7.5Boolean XPath expressions that evaluate to true can cause an infinite loop in logicalQuery.Select, leading to 100% CPU usage.Check if you run itEPSS 0.55%Mar 26, 2026
- High7.5The DataRow.Decode function fails to properly validate field lengths.Check if you run itEPSS 0.69%Mar 26, 2026
- High7.5The Delete function fails to properly validate offsets when processing malformed JSON input.Check if you run itEPSS 0.80%Mar 26, 2026
- High7.5The msgpack decoder fails to properly validate the input buffer length when processing truncated fixext data (format codes 0xd4-0xd8).Check if you run itEPSS 0.43%Mar 26, 2026
- Medium4.9InvenTree is an Open Source Inventory Management System.Check if you run itEPSS 0.31%Mar 26, 2026
- High7.7InvenTree is an Open Source Inventory Management System.Check if you run itEPSS 0.21%Mar 26, 2026
- High8.4ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies.Check if you run itEPSS 0.11%Mar 26, 2026
- High8.2A flaw was found in libsoup's SoupServer.Check if you run itEPSS 0.46%Mar 26, 2026
- High8.7ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies.Check if you run itEPSS 0.11%Mar 26, 2026
- Medium6.9Ruckus Access Point products contain an arbitrary file read vulnerability in the command-line interface that allows authenticated remote attackers with administrative privileges toCheck if you run itEPSS 0.47%Mar 26, 2026
- High8.8Zoraxy is a general purpose HTTP reverse proxy and forwarding tool.Check if you run itEPSS 0.45%Mar 26, 2026
- Medium6.5GoDoxy is a reverse proxy and container orchestrator for self-hosters.Check if you run itEPSS 0.52%Mar 26, 2026
- Low0.5Authelia is an open-source authentication and authorization server providing two-factor authentication and single sign-on (SSO) for applications via a web portal.Check if you run itEPSS 0.22%Mar 26, 2026
- High7.7Ruckus Unleashed contains a remote code execution vulnerability in the web-based management interface that allows authenticated remote attackers to execute arbitrary code on the syCheck if you run itEPSS 0.54%Mar 26, 2026
- High7.2A flaw was found in Keycloak.Check if you run itEPSS 0.49%Mar 26, 2026
Sort