Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3A flaw was found in Keycloak.Check if you run itEPSS 0.33%Mar 26, 2026
- Critical9.1Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists.Check if you run itEPSS 0.53%Mar 26, 2026
- High7.7Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists.Check if you run itEPSS 0.46%Mar 26, 2026
- Medium6.5Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists.Check if you run itEPSS 0.49%Mar 26, 2026
- Medium5.3Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists.Check if you run itEPSS 0.33%Mar 26, 2026
- Medium5.9Impact: When using multiple wildcards, combined with at least one parameter, a regular expression can be generated that is vulnerable to ReDoS.Check if you run itEPSS 0.37%Mar 26, 2026
- High8.7thingino-firmware versions up to the firmware-2026-03-16 release contains an unauthenticated os command injection vulnerability in the WiFi captive portal CGI script that allows reCheck if you run itEPSS 4.43%Mar 26, 2026
- High7.5Impact: A bad regular expression is generated any time you have multiple sequential optional groups (curly brace syntax), such as .Check if you run itEPSS 0.82%Mar 26, 2026
- Medium5.5Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists.Check if you run itEPSS 0.32%Mar 26, 2026
- High8.1Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists.Check if you run itEPSS 0.32%Mar 26, 2026
- High8.8Ory Polis, formerly known as BoxyHQ Jackson, bridges or proxies a SAML login flow to OAuth 2.0 or OpenID Connect.Check if you run itEPSS 0.48%Mar 26, 2026
- High7.8Zen C is a systems programming language that compiles to human-readable GNU C/C11.Check if you run itEPSS 0.25%Mar 26, 2026
- High7.2Ory Keto is am open source authorization server for managing permissions at scale.Check if you run itEPSS 0.23%Mar 26, 2026
- High7.2Ory Hydra is an OAuth 2.0 Server and OpenID Connect Provider.Check if you run itEPSS 0.37%Mar 26, 2026
- High7.2Ory Kratos is an identity, user management and authentication system for cloud services.Check if you run itEPSS 0.26%Mar 26, 2026
- High8.1ORY Oathkeeper is an Identity & Access Proxy (IAP) and Access Control Decision API that authorizes HTTP requests based on sets of Access Rules.Check if you run itEPSS 0.39%Mar 26, 2026
- High7.8Firecrawl version 2.8.0 and prior contain a server-side request forgery (SSRF) protection bypass vulnerability in the Playwright scraping service where network policy validation isCheck if you run itEPSS 0.43%Mar 26, 2026
- Medium6.5ORY Oathkeeper is an Identity & Access Proxy (IAP) and Access Control Decision API that authorizes HTTP requests based on sets of Access Rules.Check if you run itEPSS 0.25%Mar 26, 2026
- Critical10.0ORY Oathkeeper is an Identity & Access Proxy (IAP) and Access Control Decision API that authorizes HTTP requests based on sets of Access Rules.Check if you run itEPSS 0.54%Mar 26, 2026
- Medium6.5srvx is a universal server based on web standards.Check if you run itEPSS 0.26%Mar 26, 2026
- Medium5.3H3 is a minimal H(TTP) framework.Check if you run itEPSS 0.25%Mar 26, 2026
- High7.5goxmlsig provides XML Digital Signatures implemented in Go.Check if you run itEPSS 0.33%Mar 26, 2026
- Medium6.8Roadiz is a polymorphic content management system based on a node system that can handle many types of services.Check if you run itEPSS 0.41%Mar 26, 2026
- Medium5.3Syft is a a CLI tool and Go library for generating a Software Bill of Materials (SBOM) from container images and filesystems.Check if you run itEPSS 0.43%Mar 26, 2026
- Medium4.3FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.Check if you run itEPSS 0.24%Mar 26, 2026
Sort