Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9ChurchCRM is an open-source church management system.Check if you run itEPSS 0.36%Dec 16, 2025
- Critical9.7DeepChat is an open-source artificial intelligence agent platform that unifies models, tools, and agents.Check if you run itEPSS 0.63%Dec 16, 2025
- High7.1Fickling is a Python pickling decompiler and static analyzer.Check if you run itEPSS 0.27%Dec 16, 2025
- Medium6.5Incorrect configuration of replication security in the MariaDB component of the infra-operator in YAOOK Operator allows an on-path attacker to read database contents, potentially iCheck if you run itEPSS 0.18%Dec 16, 2025
- High7.1Fickling is a Python pickling decompiler and static analyzer.Check if you run itEPSS 0.28%Dec 16, 2025
- High8.6The FreePBX module tts (Text to Speech) for FreePBX, an open-source web-based graphical user interface (GUI) that manages Asterisk.Check if you run itEPSS 6.43%Dec 16, 2025
- Medium6.5Netty is an asynchronous, event-driven network application framework.Check if you run itEPSS 0.32%Dec 16, 2025
- Medium5.7FreePBX is an open-source web-based graphical user interface (GUI) that manages Asterisk.Check if you run itEPSS 0.13%Dec 16, 2025
- High8.8ConvertXis a self-hosted online file converter.Check if you run itEPSS 0.78%Dec 16, 2025
- Medium4.3Weblate is a web based localization tool.Check if you run itEPSS 0.27%Dec 16, 2025
- Medium5.3Weblate is a web based localization tool.Check if you run itEPSS 0.26%Dec 16, 2025
- Critical9.8Meltytech Shotcut 25.10.31 is vulnerable to Buffer Overflow.Check if you run itEPSS 0.41%Dec 16, 2025
- High8.8nopCommerce 4.90.0 is vulnerable to Cross Site Request Forgery (CSRF) via the Schedule Tasks functionality.Check if you run itEPSS 0.29%Dec 16, 2025
- Medium6.1nopCommerce 4.90.0 is vulnerable to Cross Site Scripting (XSS) in the product management functionality.Check if you run itEPSS 0.26%Dec 16, 2025
- Medium5.4nopCommerce 4.90.0 is vulnerable to Cross Site Scripting (XSS) via the Currencies functionality.Check if you run itEPSS 0.24%Dec 16, 2025
- Medium5.4nopCommerce 4.90.0 is vulnerable to Cross Site Scripting (XSS) via the Blog posts functionality in the Content Management area.Check if you run itEPSS 0.23%Dec 16, 2025
- Medium6.1nopCommerce 4.90.0 is vulnerable to Cross Site Scripting (XSS) via the Attributes functionality.Check if you run itEPSS 0.36%Dec 16, 2025
- Medium5.3An open redirect vulnerability exists in the Account module in Volosoft ABP Framework >= 5.1.0 and < 10.0.0-rc.2.Check if you run itEPSS 0.28%Dec 16, 2025
- Medium6.5An issue was discovered in Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router on firmware version V1.0.0 does not implement rate limiting to /api/login allowing attackers to brute fCheck if you run itEPSS 0.27%Dec 16, 2025
- Critical9.1When using the attachment interaction functionality, Blue Mail 1.140.103 and below saves documents to a file system without a Mark-of-the-Web tag, which allows attackers to bypassCheck if you run itEPSS 0.57%Dec 16, 2025
- Critical9.1When using the attachment interaction functionality, Canary Mail 5.1.40 and below saves documents to a file system without a Mark-of-the-Web tag, which allows attackers to bypass tCheck if you run itEPSS 0.56%Dec 16, 2025
- Medium4.3InvoicePlane commit debb446c is vulnerable to Incorrect Access Control.Check if you run itEPSS 0.30%Dec 16, 2025
- Critical10.0A Path Traversal vulnerability in the Allsky WebUI version v2024.12.06_06 allows an unauthenticated remote attacker to achieve arbitrary command execution.Check if you run itEPSS 1.85%Dec 16, 2025
- Critical9.8Ampere AmpereOne AC03 devices before 3.5.9.3, AmpereOne AC04 devices before 4.4.5.2, and AmpereOne M devices before 5.4.5.1 allow an incorrectly formed SMC call to UEFI-MM MMCommunCheck if you run itEPSS 0.36%Dec 16, 2025
- Critical9.8Ampere AmpereOne AC03 devices before 3.5.9.3, AmpereOne AC04 devices before 4.4.5.2, and AmpereOne M devices before 5.4.5.1 allow an incorrectly formed SMC call to UEFI-MM PCIe driCheck if you run itEPSS 0.36%Dec 16, 2025
Sort