Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4In JetBrains YouTrack before 2026.1.13162 stored XSS in project notification templates was possibleCheck if you run itEPSS 0.27%May 29, 2026
- High8.8In JetBrains IntelliJ IDEA before 2026.1.1 command execution was possible via the guest user accountCheck if you run itEPSS 0.51%May 29, 2026
- High7.8In JetBrains IntelliJ IDEA before 2026.1.1 command injection was possible via filename completionCheck if you run itEPSS 0.68%May 29, 2026
- Critical9.9Shopper is a Headless e-commerce Admin Panel.Check if you run itEPSS 0.42%May 29, 2026
- High8.1Shopper is a Headless e-commerce Admin Panel.Check if you run itEPSS 0.36%May 29, 2026
- Critical9.8Jinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet Converter device firmware contains plaintext administrative credentials embedded in the firmware image.Check if you run itEPSS 0.51%May 29, 2026
- High8.4A stored cross-site scripting (XSS) vulnerability exists in certain 1xxx series NVR devices due to insufficient sanitization of user-supplied input in specific functional modules.Check if you run itEPSS 0.51%May 29, 2026
- High8.8The Frontier X2 device allows unauthenticated BLE read/write access to critical GATT characteristics without enforcing pairing authentication or authorization.Check if you run itEPSS 0.43%May 29, 2026
- High7.7Arcane is an interface for managing Docker containers, images, networks, and volumes.Check if you run itEPSS 0.46%May 29, 2026
- High8.8Arcane is an interface for managing Docker containers, images, networks, and volumes.Check if you run itEPSS 0.42%May 29, 2026
- Critical9.3Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases.Check if you run itEPSS 0.21%May 29, 2026
- Critical9.9Dokploy is a free, self-hostable Platform as a Service (PaaS).Check if you run itEPSS 0.81%May 29, 2026
- Critical9.9Dokploy is a free, self-hostable Platform as a Service (PaaS).Check if you run itEPSS 1.14%May 29, 2026
- Critical10.0Dokploy is a free, self-hostable Platform as a Service (PaaS).Check if you run itEPSS 0.45%May 29, 2026
- High8.2Arcane is an interface for managing Docker containers, images, networks, and volumes.Check if you run itEPSS 0.32%May 29, 2026
- Medium6.3Arcane is an interface for managing Docker containers, images, networks, and volumes.Check if you run itEPSS 0.36%May 29, 2026
- Critical9.9Arcane is an interface for managing Docker containers, images, networks, and volumes.Check if you run itEPSS 0.52%May 29, 2026
- High8.6Klever-Go is the Go implementation of the Klever blockchain protocol.Check if you run itEPSS 0.46%May 29, 2026
- High8.7xiaomusic v0.5.7 contains an unauthenticated path traversal vulnerability in the GET /music/{file_path:path} endpoint that allows unauthenticated attackers to read arb…Check if you run itEPSS 0.65%May 29, 2026
- High7.0MoviePilot v2 contains a server-side request forgery vulnerability in the image proxy endpoint that allows authenticated attackers to request arbitrary URLs by supplyi…Check if you run itEPSS 0.25%May 29, 2026
- High8.7agno 2.6.5 contains a SQL injection vulnerability in the ClickHouse vector database backend that allows attackers to inject arbitrary SQL expressions by supplying mali…Check if you run itEPSS 0.40%May 29, 2026
- Medium5.1A vulnerability was found in macrozheng mall up to 1.0.3.Check if you run itEPSS 0.22%May 29, 2026
- Critical9.1GitHub CLI (gh) is GitHub’s official command line tool.Check if you run itEPSS 0.45%May 29, 2026
- Critical9.9Dokploy is a free, self-hostable Platform as a Service (PaaS).Check if you run itEPSS 1.05%May 29, 2026
- Critical9.9Plesk contains an XPath injection vulnerability in the APS Application Catalog search functionality, where user-supplied input is interpolated into XPath queries witho…Check if you run itEPSS 0.55%May 29, 2026
Sort