Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.6 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an au…Check if you run itEPSS 0.25%Mar 11, 2026
- UnknownTenda ac6_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 3.29%Mar 11, 2026
- High7.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.0 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an un…Check if you run itEPSS 0.53%Mar 11, 2026
- Unknownlollms lollms-webui Path Traversal: '\..\filename'Patch nowKEVEPSS 0.67%Mar 11, 2026
- UnknownTenda hg6_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 19.95%Mar 11, 2026
- UnknownASUS asuswrt Missing AuthorizationPatch nowKEVEPSS 85.16%Mar 11, 2026
- Medium6.9Istio is an open platform to connect, manage, and secure microservices.Check if you run itEPSS 0.37%Mar 10, 2026
- High8.7Istio is an open platform to connect, manage, and secure microservices.Check if you run itEPSS 0.70%Mar 10, 2026
- High8.8Flowise is a drag & drop user interface to build a customized large language model flow.Check if you run itEPSS 0.39%Mar 10, 2026
- Medium5.9Sylius is an Open Source eCommerce Framework on Symfony.Check if you run itEPSS 0.31%Mar 10, 2026
- High8.5OliveTin gives access to predefined shell commands from a web interface.Check if you run itEPSS 0.95%Mar 10, 2026
- High8.7Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in gleam-wisp wisp allows arbitrary file read via percent-encoded path traversal.Check if you run itEPSS 1.06%Mar 10, 2026
- Medium6.9Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.64%Mar 10, 2026
- Medium6.5LinkAce is a self-hosted archive to collect website links.Check if you run itEPSS 0.39%Mar 10, 2026
- High7.5Elysia is a Typescript framework for request validation, type inference, OpenAPI documentation and client-server communication.Check if you run itEPSS 0.53%Mar 10, 2026
- High7.4An improper neutralization of input vulnerability was identified in GitHub Enterprise Server that allowed DOM-based cross-site scripting via task list content.Check if you run itEPSS 0.18%Mar 10, 2026
- Critical9.3Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript.Check if you run itEPSS 0.65%Mar 10, 2026
- High8.8GetSimple CMS is a content management system.Check if you run itEPSS 0.33%Mar 10, 2026
- High7.5Envoy is a high-performance edge/middle/service proxy.Check if you run itEPSS 0.39%Mar 10, 2026
- Medium5.3If the anti spam-captcha functionality in PluXml versions 5.8.22 and earlier is enabled, a captcha challenge is generated with a format that can be automatically recog…Check if you run itEPSS 0.30%Mar 10, 2026
- High8.2MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira).Check if you run itEPSS 1.04%Mar 10, 2026
- High7.5Server-Side Request Forgery (SSRF) vulnerability in pdfmake versions 0.3.0-beta.2 through 0.3.5 allows a remote attacker to obtain sensitive information via the src/UR…Check if you run itEPSS 0.64%Mar 10, 2026
- Critical9.3Nefteprodukttekhnika BUK TS-G Gas Station Automation System 2.9.1 on Linux contains a SQL Injection vulnerability (CWE-89) in the system configuration module.Check if you run itEPSS 0.98%Mar 10, 2026
- Medium5.3An improper authorization vulnerability was identified in GitHub Enterprise Server that allowed a user with read access to a repository and write access to a project t…Check if you run itEPSS 0.44%Mar 10, 2026
- High7.1StudioCMS is a server-side-rendered, Astro native, headless content management system.Check if you run itEPSS 0.46%Mar 10, 2026