Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7Unauthenticated attackers can exploit a weakness in the XML parser functionality of the SOAP endpoints in 4D server.Check if you run itEPSS 0.45%Apr 30, 2026
- Critical9.3WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 98.53%Apr 28, 2026
- Critical9.3BerriAI LiteLLM SQL Injection VulnerabilityPatch nowKEVEPSS 89.42%Apr 27, 2026
- Critical9.1Dgraph is an open source distributed GraphQL database.Check if you run itEPSS 0.49%Apr 24, 2026
- High7.5A flaw was found in libxml2.Check if you run itEPSS 0.63%Apr 23, 2026
- High7.5A flaw was found in camel-infinispan.Check if you run itEPSS 0.67%Apr 22, 2026
- High7.8Linux Kernel Incorrect Resource Transfer Between Spheres VulnerabilityPatch nowKEVEPSS 98.11%Apr 22, 2026
- High7.5LMDeploy is a toolkit for compressing, deploying, and serving large language models.Patch nowKEVEPSS 45.25%Apr 20, 2026
- Critical9.0Thymeleaf is a server-side Java template engine for web and standalone environments.Check if you run itEPSS 1.10%Apr 17, 2026
- High8.0A prompt injection vulnerability in Windsurf 1.9544.26 allows remote attackers to execute arbitrary commands on a victim system.Check if you run itEPSS 0.28%Apr 15, 2026
- Critical9.8Microsoft Internet Key Exchange (IKE) Service Extensions Double Free VulnerabilityPatch nowKEVEPSS 77.05%Apr 14, 2026
- Critical9.8Fortinet FortiSandbox OS Command Injection VulnerabilityPatch nowKEVEPSS 93.19%Apr 14, 2026
- Critical9.8Chamilo LMS is a learning management system.Check if you run itEPSS 0.43%Apr 10, 2026
- High7.5Apache Tomcat Missing Encryption of Sensitive Data VulnerabilityPatch nowKEVEPSS 98.50%Apr 9, 2026
- High7.5Issue summary: When a delta CRL that contains a Delta CRL Indicator extension is processed a NULL pointer dereference might happen if the required CRL Number extension is missing.Check if you run itEPSS 0.89%Apr 7, 2026
- Critical9.3Open Access Management (OpenAM) is an access management solution.Check if you run itEPSS 9.33%Apr 7, 2026
- High8.2Vite is a frontend tooling framework for JavaScript.Check if you run itEPSS 3.40%Apr 7, 2026
- High7.5Drizzle is a modern TypeScript ORM.Check if you run itEPSS 0.39%Apr 7, 2026
- Critical9.3Rack::Session is a session management implementation for Rack.Check if you run itEPSS 0.27%Apr 7, 2026
- Critical9.4Windmill CE and EE versions 1.276.0 through 1.603.2 contain an SQL injection vulnerability in the folder ownership management functionality that allows authenticated a…Check this weekEPSS 13.58%Apr 7, 2026
- High7.8A vulnerability in the HuggingFace Transformers library, specifically in the class, allows for arbitrary code execution.Check if you run itEPSS 0.38%Apr 7, 2026
- High8.8Apache ActiveMQ Improper Input Validation VulnerabilityPatch nowKEVEPSS 98.26%Apr 7, 2026
- High8.6Adobe Acrobat and Reader Prototype Pollution VulnerabilityPatch nowKEVEPSS 7.23%Apr 7, 2026
- High7.8BentoML is a Python library for building online serving systems optimized for AI apps and model inference.Check if you run itEPSS 0.32%Apr 6, 2026
- High8.7LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format.Patch nowKEVEPSS 38.61%Apr 6, 2026
Sort