Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical10.0Vito is a self-hosted web application that helps manage servers and deploy PHP applications into production servers.Check if you run itEPSS 0.43%Mar 6, 2026
- High8.4TSPortal is the WikiTide Foundation’s in-house platform used by the Trust and Safety team to manage reports, investigations, appeals, and transparency work.Check if you run itEPSS 0.29%Mar 6, 2026
- Medium6.9Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.37%Mar 6, 2026
- High8.5Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.43%Mar 6, 2026
- Medium6.9Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.36%Mar 6, 2026
- High8.6Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.43%Mar 6, 2026
- Critical9.3Wekan is an open source kanban tool built with Meteor.Check if you run itEPSS 0.27%Mar 6, 2026
- High8.7Wekan is an open source kanban tool built with Meteor.Check if you run itEPSS 0.39%Mar 6, 2026
- Medium6.9Wekan is an open source kanban tool built with Meteor.Check if you run itEPSS 0.34%Mar 6, 2026
- Critical9.3Wekan is an open source kanban tool built with Meteor.Check if you run itEPSS 0.27%Mar 6, 2026
- Critical9.3Wekan is an open source kanban tool built with Meteor.Check if you run itEPSS 0.25%Mar 6, 2026
- High8.8Immutable.js provides many Persistent Immutable data structures.Check if you run itEPSS 0.99%Mar 6, 2026
- High7.7Lemmy, a link aggregator and forum for the fediverse, is vulnerable to server-side request forgery via a dependency on activitypub_federation, a framework for ActivityPub federatioCheck if you run itEPSS 0.29%Mar 6, 2026
- Medium5.3Cryptomator encrypts data being stored on cloud infrastructure.Check if you run itEPSS 0.14%Mar 6, 2026
- Medium5.3Fastify incorrectly accepts malformed headers containing trailing characters after the subtype token, in violation of RFC 9110 §8.3.1(https://httpwg.org/specs/rfc9110.html#field.coCheck if you run itEPSS 0.39%Mar 6, 2026
- High8.1Locutus brings stdlibs of other programming languages to JavaScript for educational purposes.Check if you run itEPSS 0.89%Mar 6, 2026
- Medium6.9Rocket.Chat is an open-source, secure, fully customizable communications platform.Check if you run itEPSS 0.30%Mar 6, 2026
- High8.0Rocket.Chat is an open-source, secure, fully customizable communications platform.Check if you run itEPSS 0.38%Mar 6, 2026
- Critical9.3Rocket.Chat is an open-source, secure, fully customizable communications platform.Check if you run itEPSS 0.55%Mar 6, 2026
- High7.5Incorrect access control in the REST API of Ibexa & Ciril GROUP eZ Platform / Ciril Platform 2.x allows unauthenticated attackers to access sensitive data via enumerat…Check if you run itEPSS 0.28%Mar 6, 2026
- High8.8TimescaleDB is a time-series database for high-performance real-time analytics packaged as a Postgres extension.Check if you run itEPSS 0.15%Mar 6, 2026
- High7.5@hono/node-server allows running the Hono application on Node.js.Check if you run itEPSS 0.36%Mar 6, 2026
- High7.5The shell tool within GitHub Copilot CLI versions prior to and including 0.0.422 can allow arbitrary code execution through crafted bash parameter expansion patterns.Check if you run itEPSS 0.47%Mar 6, 2026
- High7.3Kestra is an event-driven orchestration platform.Check if you run itEPSS 0.27%Mar 6, 2026
- Critical9.8Mesa is an open-source Python library for agent-based modeling, simulating complex systems and exploring emergent behaviors.Check if you run itEPSS 0.41%Mar 6, 2026
Sort