Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3LibreChat is a ChatGPT clone with additional features.Check if you run itEPSS 0.28%Jan 7, 2026
- High8.8iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles.Check if you run itEPSS 0.37%Jan 7, 2026
- High7.1LibreChat is a ChatGPT clone with additional features.Check if you run itEPSS 0.34%Jan 7, 2026
- High7.1iccDEV provides a set of libraries and tools that allow for the interaction, manipulation, and application of International Color Consortium (ICC) color management profiles.Check if you run itEPSS 0.21%Jan 7, 2026
- Medium5.5RustFS is a distributed object storage system built in Rust.Check if you run itEPSS 0.34%Jan 7, 2026
- High8.8RustFS is a distributed object storage system built in Rust.Check if you run itEPSS 7.26%Jan 7, 2026
- Medium6.8Bio-Formats versions up to and including 8.3.0 perform unsafe Java deserialization of attacker-controlled memoization cache files (.bfmemo) during image processing.Check if you run itEPSS 0.51%Jan 7, 2026
- Medium4.6Bio-Formats versions up to and including 8.3.0 contain an XML External Entity (XXE) vulnerability in the Leica Microsystems metadata parsing component (e.g., XLEF).Check if you run itEPSS 0.17%Jan 7, 2026
- Medium4.6OpenLDAP Lightning Memory-Mapped Database (LMDB) versions up to and including 0.9.14, prior to commit 8e1fda8, contain a heap buffer underflow in the readline() function of mdb_loaCheck if you run itEPSS 0.15%Jan 7, 2026
- Medium6.9The deploy-stub component in Panda3D versions up to and including 1.10.16 contains a denial of service vulnerability due to unbounded stack allocation.Check if you run itEPSS 0.21%Jan 7, 2026
- Medium5.1The egg-mkfont utility in Panda3D versions up to and including 1.10.16 contains an uncontrolled format string vulnerability.Check if you run itEPSS 0.37%Jan 7, 2026
- Medium6.9The egg-mkfont utility in Panda3D versions up to and including 1.10.16 contains a stack-based buffer overflow vulnerability due to use of an unbounded sprintf() call with attacker-Check if you run itEPSS 0.52%Jan 7, 2026
- High8.6An unused webshell in MicroServer allows unlimited login attempts, with sudo rights on certain files and directories.Check if you run itEPSS 0.46%Jan 7, 2026
- High7.1MicroServer copies parts of the system firmware to an unencrypted external SD card on boot, which contains user and vendor secrets.Check if you run itEPSS 0.14%Jan 7, 2026
- High8.7An unused function in MicroServer can start a reverse SSH connection to a vendor registered domain, without mutual authentication.Check if you run itEPSS 0.27%Jan 7, 2026
- Medium6.1Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki - ProofreadPage Extension allows Cross-SCheck if you run itEPSS 0.19%Jan 7, 2026
- High7.2The Tarkov Data Manager is a tool to manage the Tarkov item data.Check if you run itEPSS 0.40%Jan 7, 2026
- Critical9.3The Tarkov Data Manager is a tool to manage the Tarkov item data.Check if you run itEPSS 0.24%Jan 7, 2026
- High7.1Insufficient Session Expiration vulnerability in ABB WebPro SNMP Card PowerValue, ABB WebPro SNMP Card PowerValue UL.This issue affects WebPro SNMP Card PowerValue: th…Check if you run itEPSS 0.21%Jan 7, 2026
- Critical9.8The Tarkov Data Manager is a tool to manage the Tarkov item data.Check if you run itEPSS 0.46%Jan 7, 2026
- High7.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Wikimedia Foundation MediaWiki - CSS extension allows Path Traversal.This issue affeCheck if you run itEPSS 0.44%Jan 7, 2026
- Medium5.3Inefficient Regular Expression Complexity vulnerability in Wikimedia Foundation MediaWiki - VisualData Extension allows Regular Expression Exponential Blowup.This issue affects MedCheck if you run itEPSS 0.48%Jan 7, 2026
- Medium4.9Cisco Identity Services Engine Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 6.08%Jan 7, 2026
- Medium6.1Cross-site Scripting vulnerability in Devolutions PowerShell Universal.This issue affects Powershell Universal: before 4.5.6, before 5.6.13.Check if you run itEPSS 0.18%Jan 7, 2026
- High8.4Incorrect Implementation of Authentication Algorithm vulnerability in ABB WebPro SNMP Card PowerValue, ABB WebPro SNMP Card PowerValue UL.This issue affects WebPro SNM…Check if you run itEPSS 0.27%Jan 7, 2026
Sort