Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.9Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in JFrog Artifactory (Workers) allows Cross-Site Scripting (XSS).This issuCheck if you run itEPSS 0.28%Jan 4, 2026
- Medium6.9A vulnerability was detected in code-projects Online Product Reservation System 1.0.Check if you run itEPSS 0.43%Jan 4, 2026
- Medium6.9A security vulnerability has been detected in code-projects Online Product Reservation System 1.0.Check if you run itEPSS 0.43%Jan 4, 2026
- Medium5.3A weakness has been identified in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4.Check if you run itEPSS 0.35%Jan 4, 2026
- Medium6.9Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains a broken access control vulnerability that allows authenticated users to access other users' pet data by exploitinCheck if you run itEPSS 0.21%Jan 3, 2026
- Medium6.9Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an information disclosure vulnerability that allows unauthorized access to device hardware information by exploitiCheck if you run itEPSS 0.28%Jan 3, 2026
- Medium6.9Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an improper access control vulnerability that allows unauthorized device manipulation by accepting arbitrary seriaCheck if you run itEPSS 0.25%Jan 3, 2026
- Medium6.9Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an information disclosure vulnerability that allows unauthorized access to private audio recordings by exploitingCheck if you run itEPSS 0.23%Jan 3, 2026
- Medium6.9Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an authorization bypass vulnerability that allows unauthorized users to add users as shared owners to any device bCheck if you run itEPSS 0.23%Jan 3, 2026
- Medium6.9Petlibro Smart Pet Feeder Platform versions up to 1.7.31 contains an authentication bypass vulnerability that allows unauthenticated attackers to access any user account by exploitCheck if you run itEPSS 0.29%Jan 3, 2026
- Medium6.9CasaOS versions up to and including 0.4.15 expose multiple unauthenticated endpoints that allow remote attackers to retrieve sensitive configuration files and system debug informatCheck if you run itEPSS 0.68%Jan 3, 2026
- None0.0Not usedCheck if you run itEPSS 0.00%Jan 3, 2026
- None0.0Not usedCheck if you run itEPSS 0.00%Jan 3, 2026
- None0.0Not usedCheck if you run itEPSS 0.00%Jan 3, 2026
- None0.0Not usedCheck if you run itEPSS 0.00%Jan 3, 2026
- None0.0Not usedCheck if you run itEPSS 0.00%Jan 3, 2026
- None0.0Not usedCheck if you run itEPSS 0.00%Jan 3, 2026
- None0.0Not usedCheck if you run itEPSS 0.00%Jan 3, 2026
- None0.0Not usedCheck if you run itEPSS 0.00%Jan 3, 2026
- None0.0Not usedCheck if you run itEPSS 0.00%Jan 3, 2026
- Medium5.3AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.Check if you run itEPSS 0.76%Jan 3, 2026
- High8.7Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows OS Command InjectionCheck if you run itEPSS 1.01%Jan 3, 2026
- Critical9.4A vulnerability in Nuvation Energy nCloud VPN Service allowed Network Boundary Bridging.This issue affected the nCloud VPN Service and was fixed on 2025-12-1 (December, 2025).Check if you run itEPSS 0.26%Jan 3, 2026
- High7.9Unintended Proxy or Intermediary vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Network Boundary Bridging.This issue affects Multi-Stack Controller (MSC): thrCheck if you run itEPSS 0.32%Jan 2, 2026
- High7.2Insufficiently Protected Credentials vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Signature Spoofing by Key Theft.This issue affects Multi-Stack ControllerCheck if you run itEPSS 0.09%Jan 2, 2026
Sort