Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.2Misskey is an open source, federated social media platform.Check if you run itEPSS 0.28%Mar 9, 2026
- Critical9.8vLLM is an inference and serving engine for large language models (LLMs).Check if you run itEPSS 0.60%Mar 9, 2026
- High8.8Ghostty is a cross-platform terminal emulator.Check if you run itEPSS 0.35%Mar 9, 2026
- High8.2node-tar is a full-featured Tar for Node.js.Check if you run itEPSS 0.29%Mar 9, 2026
- Medium6.0Camaleon CMS versions 2.4.5.0 through 2.9.0, prior to commit f54a77e, contain a path traversal vulnerability in the AWS S3 uploader implementation that allows authenticated users tCheck if you run itEPSS 0.83%Mar 9, 2026
- High7.1SiYuan is a personal knowledge management system.Check if you run itEPSS 0.34%Mar 9, 2026
- Critical9.1Budibase is a low code platform for creating internal tools, workflows, and admin panels.Patch nowKEVEPSS 16.68%Mar 9, 2026
- Critical9.6Budibase is a low code platform for creating internal tools, workflows, and admin panels.Check if you run itEPSS 0.29%Mar 9, 2026
- High7.5An issue pertaining to CWE-1333: Inefficient Regular Expression Complexity (4.19) was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.Check if you run itEPSS 0.39%Mar 9, 2026
- High8.7Budibase is a low code platform for creating internal tools, workflows, and admin panels.Check if you run itEPSS 0.34%Mar 9, 2026
- Critical9.0Budibase is a low code platform for creating internal tools, workflows, and admin panels.Check if you run itEPSS 0.31%Mar 9, 2026
- High8.6Budibase is a low code platform for creating internal tools, workflows, and admin panels.Check if you run itEPSS 0.55%Mar 9, 2026
- High8.2FreshRSS is a free, self-hostable RSS aggregator.Check if you run itEPSS 0.30%Mar 9, 2026
- High7.5FreshRSS is a free, self-hostable RSS aggregator.Check if you run itEPSS 0.43%Mar 9, 2026
- High7.5A vulnerability in the function of the module in nltk version 3.9.2 allows arbitrary file read due to improper validation of input paths.Check if you run itEPSS 0.59%Mar 9, 2026
- Medium5.9Improper access control in user and role restore API endpoints in Devolutions Server 2025.3.11.0 and earlier allows a low-privileged authenticated user to restore deleted users andCheck if you run itEPSS 0.20%Mar 9, 2026
- Medium6.9Keygraph Shannon contains a hard-coded API key in its router configuration that, when the router component is enabled and exposed, allows network attackers to authenticate using thCheck if you run itEPSS 0.28%Mar 9, 2026
- High8.5A command injection vulnerability was identified in the web module of Archer AXE75 v1.6/v1.0 router.Check if you run itEPSS 1.56%Mar 9, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: fs/xattr: missing fdput() in fremovexattr error path In the Linux kernel, the fremovexattr() syscal…Check if you run itEPSS 0.24%Mar 9, 2026
- High7.5A server-side request forgery (SSRF) vulnerability in IKEA Dirigera v2.866.4 allows an attacker to exfiltrate private keys by sending a crafted request.Check if you run itEPSS 0.12%Mar 9, 2026
- High8.5MobaXterm versions prior to 26.1 contain an uncontrolled search path element vulnerability.Check if you run itEPSS 0.15%Mar 9, 2026
- Medium5.3Actual Sync Server allows authenticated users to upload files through POST /sync/upload-user-file.Check if you run itEPSS 0.42%Mar 9, 2026
- Medium4.3Malicious scripts could display attacker-controlled web content under spoofed domains in Focus for iOS by stalling a _self navigation to an invalid port and triggering an iframe reCheck if you run itEPSS 0.21%Mar 9, 2026
- Medium5.1A vulnerability has been found in SourceCodester Resort Reservation System 1.0.Check if you run itEPSS 0.30%Mar 9, 2026
- High7.5The rtsock_msg_buffer() function serializes routing information into a buffer.Check if you run itEPSS 0.65%Mar 9, 2026
Sort