Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical10.0Authentication Bypass Using an Alternate Path or Channel vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows Authentication Bypass.This issue affects Multi-Stack CCheck if you run itEPSS 0.40%Jan 2, 2026
- Critical9.4Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Nuvation Energy Multi-Stack Controller (MSC) allows OS Command InjectionCheck if you run itEPSS 1.01%Jan 2, 2026
- Critical9.3A vulnerability in Nuvation Battery Management System allows Authentication Bypass.This issue affects Battery Management System: through 2.3.9.Check if you run itEPSS 0.46%Jan 2, 2026
- Medium5.4listmonk is a standalone, self-hosted, newsletter and mailing list manager.Check if you run itEPSS 0.23%Jan 2, 2026
- High7.5MessagePack for Java is a serializer implementation for Java.Check if you run itEPSS 0.60%Jan 2, 2026
- High7.3Bagisto is an open source laravel eCommerce platform.Check if you run itEPSS 1.36%Jan 2, 2026
- Medium5.2Bagisto is an open source laravel eCommerce platform.Check if you run itEPSS 0.56%Jan 2, 2026
- High7.4Bagisto is an open source laravel eCommerce platform.Check if you run itEPSS 0.50%Jan 2, 2026
- High8.9Bagisto is an open source laravel eCommerce platform.Check if you run itEPSS 0.92%Jan 2, 2026
- High7.1Bagisto is an open source laravel eCommerce platform.Check if you run itEPSS 0.30%Jan 2, 2026
- Medium5.3A security flaw has been discovered in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4.Check if you run itEPSS 0.53%Jan 2, 2026
- High8.8Bagisto is an open source laravel eCommerce platform.Check if you run itEPSS 0.63%Jan 2, 2026
- High8.8Langflow Langflow Missing Authentication for Critical FunctionPatch nowKEVEPSS 33.29%Jan 2, 2026
- Medium5.5libtpms, a library that provides software emulation of a Trusted Platform Module, has a flaw in versions 0.10.0 and 0.10.1.Check if you run itEPSS 0.08%Jan 2, 2026
- Critical9.2AdonisJS is a TypeScript-first web framework.Check if you run itEPSS 1.03%Jan 2, 2026
- Medium6.9A vulnerability was found in code-projects Online Music Site 1.0.Check if you run itEPSS 0.43%Jan 2, 2026
- High7.7Emlog is an open source website building system.Check if you run itEPSS 0.32%Jan 2, 2026
- Medium6.8Emlog is an open source website building system.Check if you run itEPSS 0.20%Jan 2, 2026
- Low2.0Emlog is an open source website building system.Check if you run itEPSS 0.20%Jan 2, 2026
- High7.0Emlog is an open source website building system.Check if you run itEPSS 0.18%Jan 2, 2026
- Medium6.9A vulnerability has been found in code-projects Online Music Site 1.0.Check if you run itEPSS 0.39%Jan 2, 2026
- None0.0This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.Check if you run itEPSS 0.00%Jan 2, 2026
- None0.0This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.Check if you run itEPSS 0.00%Jan 2, 2026
- None0.0This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.Check if you run itEPSS 0.00%Jan 2, 2026
- None0.0This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure.Check if you run itEPSS 0.00%Jan 2, 2026
Sort