Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.9Incus is a system container and virtual machine manager.Check if you run itEPSS 0.73%Aug 21, 2026
- Critical9.9Incus is a system container and virtual machine manager.Check if you run itEPSS 0.64%Aug 21, 2026
- Critical9.9Incus is a system container and virtual machine manager.Check if you run itEPSS 0.73%Aug 21, 2026
- Critical9.9Incus is a system container and virtual machine manager.Check if you run itEPSS 0.73%Aug 21, 2026
- Medium4.4Incus is a system container and virtual machine manager.Check if you run itEPSS 0.15%Aug 21, 2026
- Critical9.3Headroom's LLM proxy derives the memory owner from the x-headroom-user-id request header.Check if you run itEPSS 0.61%Aug 21, 2026
- High7.7Headroom's LLM proxy lets a client choose the upstream destination with the x-headroom-base-url request header.Check if you run itEPSS 0.59%Aug 21, 2026
- Critical9.8In Spring AI's tool calling support, the per-request tool list is advertised to the model as a boundary but is not fully enforced when a tool call is dispatched.Check if you run itEPSS 0.25%Aug 21, 2026
- Critical9.8GeoTools is an open source Java library that provides tools for geospatial data.Patch nowKEVEPSS 3.98%Aug 21, 2026
- UnknownMiniOrange saml_sp_single_sign_on Improper AuthenticationPatch nowKEVEPSS 2.36%Aug 21, 2026
- Medium4.8Coder before 2.34.2 Stored HTML Injection via Appearance SettingsCheck if you run itEPSS 0.17%Aug 20, 2026
- Medium6.3Coder before 2.34.2 User Enumeration via Login Placeholder HashCheck if you run itEPSS 0.22%Aug 20, 2026
- Medium5.5asteval Sandbox Escape: arbitrary native memory read/write via numpy ctypes in default asteval InterpreterCheck if you run itEPSS 0.13%Aug 20, 2026
- High7.4A flaw was found in WildFly Elytron.Check if you run itEPSS 0.89%Aug 20, 2026
- Unknown0.1.9 was removed from crates.io due to a malicious dependencyOpen the advisoryAug 20, 2026
- Critical9.6A flaw was found in FreeIPA.Check if you run itEPSS 0.35%Aug 20, 2026
- High8.7A privilege escalation flaw was found in FreeIPA.Check if you run itEPSS 0.57%Aug 20, 2026
- Medium5.7Punk::OAuth2 versions before 0.03 for Perl allow an attacker-chosen off-site redirect after login because same_origin_path accepts a backslash or tab in the return parameter.Check if you run itEPSS 0.50%Aug 20, 2026
- UnknownSPIP SPIP Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 2.29%Aug 20, 2026
- UnknownVeronaLabs wp_statistics Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.65%Aug 20, 2026
- High8.7Akaunting 3.1.21 contains an authenticated improper authorization vulnerability in the common BulkActions dispatcher.This issue affects Akaunting: 3.1.21.Check if you run itEPSS 0.30%Aug 19, 2026
- Medium6.5Cisco Unified Intelligence Center SQL Injection VulnerabilityCheck if you run itEPSS 0.35%Aug 19, 2026
- UnknownMalicious code in eth-react-provider (npm)Open the advisoryAug 19, 2026
- High7.1AIL Framework contains a server-side request forgery (SSRF) vulnerability in its crawler submission functionality.Check if you run itEPSS 0.40%Aug 19, 2026
- Medium5.3The Membership For WooCommerce WordPress plugin before 3.1.2 does not check that an API consumer secret has actually been generated before comparing it against the one…Check if you run itEPSS 0.32%Aug 19, 2026
Sort