Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Wallos is an open-source, self-hostable personal subscription tracker.Check if you run itEPSS 0.48%Mar 7, 2026
- Medium6.9Rocket.Chat is an open-source, secure, fully customizable communications platform.Check if you run itEPSS 0.30%Mar 6, 2026
- Critical10.0Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatch nowKEVEPSS 88.66%Mar 4, 2026
- High8.8Rollup is a module bundler for JavaScript.Check if you run itEPSS 1.65%Feb 25, 2026
- Medium5.3Improper Neutralization of Special Elements used in a SQL Command ('SQL Injection') vulnerability in Apache Superset allows an authenticated user with read access to c…Check if you run itEPSS 0.71%Feb 24, 2026
- Medium5.7Craft is a content management system (CMS).Check if you run itEPSS 0.46%Feb 24, 2026
- High7.0Craft is a content management system (CMS).Check if you run itEPSS 0.49%Feb 24, 2026
- Medium6.5Metabase is an open-source data analytics platform.Check if you run itEPSS 0.30%Feb 21, 2026
- High7.3MLflow Use of Default Password Authentication Bypass Vulnerability.Check if you run itEPSS 1.08%Feb 20, 2026
- High7.3MLflow Tracking Server Artifact Handler Directory Traversal Remote Code Execution Vulnerability.Check if you run itEPSS 1.85%Feb 20, 2026
- High7.5Ghost is a Node.js content management system.Patch nowKEVEPSS 71.09%Feb 20, 2026
- Medium5.5Safetica Kernel Driver Privileged Termination VulnerabilityPatch nowKEVEPSS 0.26%Feb 11, 2026
- Medium5.9Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor VulnerabilityPatch nowKEVEPSS 29.50%Feb 10, 2026
- Unknowningress-nginx rules.http.paths.path nginx configuration injectionCheck if you run itEPSS 0.55%Feb 2, 2026
- Critical9.8Ivanti Endpoint Manager Mobile (EPMM) Code Injection VulnerabilityPatch nowKEVEPSS 98.64%Jan 29, 2026
- Critical9.8Ivanti Endpoint Manager Mobile (EPMM) Code Injection VulnerabilityPatch nowKEVEPSS 98.69%Jan 29, 2026
- Critical9.8Langflow Langflow Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 28.05%Jan 23, 2026
- High8.4SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte.Check if you run itEPSS 0.52%Jan 15, 2026
- Critical9.3VIVOTEK Camera FirmwareCheck this weekEPSS 13.81%Jan 13, 2026
- Critical9.3The OWASP core rule set (CRS) is a set of generic attack detection rules for use with compatible web application firewalls.Check this weekEPSS 17.75%Jan 8, 2026
- Medium6.5n8n is an open source workflow automation platform.Check if you run itEPSS 0.47%Jan 8, 2026
- High7.2Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting VulnerabilityPatch nowKEVEPSS 20.23%Jan 5, 2026
- Critical9.8A Server-Side Template Injection (SSTI) vulnerability exists in the Frappe ERPNext through 15.89.0 Print Format rendering mechanism.Check if you run itEPSS 0.50%Dec 15, 2025
- Critical9.3Node-SAML is a SAML library not dependent on any frameworks that runs in Node.Check if you run itEPSS 0.55%Dec 12, 2025
- Medium6.2ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system write.Check if you run itEPSS 0.65%Dec 9, 2025
Sort