Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Ella Core is a 5G core designed for private networks.Check if you run itEPSS 0.35%Mar 12, 2026
- Medium6.9OneUptime is a solution for monitoring and managing online services.Check if you run itEPSS 0.27%Mar 12, 2026
- High7.6OneUptime is a solution for monitoring and managing online services.Check if you run itEPSS 0.26%Mar 12, 2026
- Critical10.0OneUptime is a solution for monitoring and managing online services.Check if you run itEPSS 0.74%Mar 12, 2026
- Critical9.8Locutus brings stdlibs of other programming languages to JavaScript for educational purposes.Check if you run itEPSS 0.65%Mar 12, 2026
- High8.1OpenClaw is a personal AI assistant.Check if you run itEPSS 0.18%Mar 12, 2026
- Critical9.3Centrifugo is an open-source scalable real-time messaging server.Check if you run itEPSS 0.29%Mar 12, 2026
- High8.5Anchore Enterprise versions before 5.25.1 contain an SQL injection vulnerability in the GraphQL Reports API.Check if you run itEPSS 0.34%Mar 12, 2026
- High7.5undici: Undici: Denial of Service via invalid WebSocket permessage-deflate extension parameterCheck if you run itEPSS 1.00%Mar 12, 2026
- High7.5ImpactA server can reply with a WebSocket frame using the 64-bit length form and an extremely large length.Check if you run itEPSS 0.56%Mar 12, 2026
- Medium4.6ImpactWhen an application passes user-controlled input to the upgrade option of client.request(), an attacker can inject CRLF sequences (\r\n) to: * Inject arbitrary HTTP headers *Check if you run itEPSS 0.32%Mar 12, 2026
- High8.7Black is the uncompromising Python code formatter.Check if you run itEPSS 0.69%Mar 12, 2026
- Medium5.9This is an uncontrolled resource consumption vulnerability (CWE-400) that can lead to Denial of Service (DoS).Check if you run itEPSS 0.63%Mar 12, 2026
- High7.5The undici WebSocket client is vulnerable to a denial-of-service attack via unbounded memory consumption during permessage-deflate decompression.Check if you run itEPSS 1.28%Mar 12, 2026
- Critical10.0The Honeywell IQ4x building management controller, exposes its full web-based HMI without authentication in its factory-default configuration.Check if you run itEPSS 6.30%Mar 12, 2026
- Critical9.8Undici allows duplicate HTTP Content-Length headers when they are provided in an array with case-variant names (e.g., Content-Length and content-length).Check if you run itEPSS 0.56%Mar 12, 2026
- Medium6.3Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.31%Mar 12, 2026
- Critical9.8Deno is a JavaScript, TypeScript, and WebAssembly runtime.Check if you run itEPSS 1.64%Mar 12, 2026
- Medium6.7ImageMagick is free and open-source software used for editing and manipulating digital images.Check if you run itEPSS 0.11%Mar 12, 2026
- Medium6.3Cap'n Proto is a data interchange format and capability-based RPC system.Check if you run itEPSS 0.24%Mar 12, 2026
- Medium6.3Cap'n Proto is a data interchange format and capability-based RPC system.Check if you run itEPSS 0.24%Mar 12, 2026
- Critical9.3Tolgee is an open-source localization platform.Check if you run itEPSS 0.46%Mar 12, 2026
- Medium5.5Vim is an open source, command line text editor.Check if you run itEPSS 0.16%Mar 12, 2026
- Medium6.5Local File Inclusion in Contact Plan, E-Mail, SMS and Fax components in Asseco SEE Live 2.0 allows remote authenticated users to access files on the host via "path" pa…Check if you run itEPSS 0.32%Mar 12, 2026
- Critical9.3Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.68%Mar 12, 2026
Sort