Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.8Chamilo is a learning management system.Check if you run itEPSS 0.31%Mar 2, 2026
- Medium5.3Chamilo is a learning management system.Check if you run itEPSS 0.34%Mar 2, 2026
- High8.7Chamilo is a learning management system.Check if you run itEPSS 0.92%Mar 2, 2026
- Medium5.4Statmatic is a Laravel and Git powered content management system (CMS).Check if you run itEPSS 0.37%Feb 27, 2026
- High8.0Statmatic is a Laravel and Git powered content management system (CMS).Check if you run itEPSS 0.84%Feb 27, 2026
- Medium6.5Statmatic is a Laravel and Git powered content management system (CMS).Check if you run itEPSS 0.43%Feb 27, 2026
- High8.6Statmatic is a Laravel and Git powered content management system (CMS).Check if you run itEPSS 0.48%Feb 27, 2026
- High8.8Statmatic is a Laravel and Git powered content management system (CMS).Check if you run itEPSS 0.47%Feb 27, 2026
- Medium4.9Bitnami Sealed Secrets is vulnerable to a scope-widening attack during the secret rotation (/v1/rotate) flow.Check if you run itEPSS 0.37%Feb 26, 2026
- High8.7TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32.Check if you run itEPSS 0.84%Feb 26, 2026
- Critical9.2The Angular SSR is a server-rise rendering tool for Angular applications.Check if you run itEPSS 0.53%Feb 25, 2026
- Low2.7Ethereum Name Service (ENS) is a distributed, open, and extensible naming system based on the Ethereum blockchain.Check if you run itEPSS 0.18%Feb 25, 2026
- Critical9.6Cross-Site Scripting (XSS) vulnerability in the subtitle loading function of the asbplayer Chrome Extension version 1.14.0 allows attackers to execute arbitrary JavaSc…Check if you run itEPSS 0.34%Feb 25, 2026
- High8.8ADB Explorer is a fluent UI for ADB on Windows.Check if you run itEPSS 0.23%Feb 25, 2026
- High8.8Statmatic is a Laravel and Git powered content management system (CMS).Check if you run itEPSS 0.56%Feb 24, 2026
- High8.7Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior implement an authentication token (X-User-Token) with insufficient expiration.Check if you run itEPSS 0.97%Feb 24, 2026
- Critical9.3Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior ship with default credentials that are not forced to be changed during installation…Check if you run itEPSS 2.76%Feb 24, 2026
- High8.7Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior expose RTSP streams without requiring authentication.Check if you run itEPSS 1.05%Feb 24, 2026
- Critical9.4A sandbox escape vulnerability exists in dotCMS’s Velocity scripting engine (VTools) that allows authenticated users with scripting privileges to bypass class and pack…Check if you run itEPSS 0.32%Feb 24, 2026
- Medium4.0Akamai Ghost on Akamai CDN edge servers before 2026-02-06 mishandles processing of custom hop-by-hop HTTP headers, where an incoming request containing the header "Con…Check if you run itEPSS 0.27%Feb 23, 2026
- Low1.3A vulnerability was identified in higuma web-audio-recorder-js 0.1/0.1.1.Check if you run itEPSS 0.71%Feb 23, 2026
- Medium4.8Statmatic is a Laravel and Git powered content management system (CMS).Check if you run itEPSS 0.37%Feb 21, 2026
- High8.7Chamilo LMS 1.11.8 contains an arbitrary file upload vulnerability that allows authenticated users to upload and execute PHP files through the elfinder filemanager module.Check if you run itEPSS 0.40%Feb 20, 2026
- High7.7Predictable bucket naming in Vertex AI Experiments in Google Cloud Vertex AI from version 1.21.0 up to (but not including) 1.133.0 on Google Cloud Platform allows an u…Check if you run itEPSS 0.46%Feb 20, 2026
- Medium5.3OpenSourcePOS 3.4.1 has a second order SQL Injection vulnerability in the handling of the currency_symbol configuration field.Check if you run itEPSS 0.43%Feb 20, 2026