Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.0Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Check if you run itEPSS 0.29%May 15, 2026
- Medium5.3phpMyFAQ before 4.1.2 contains an insufficient authorization vulnerability in admin-api routes that allows authenticated ordinary users to access administrative endpoi…Check if you run itEPSS 0.28%May 15, 2026
- Medium5.3Mathesar is a web application that makes working with PostgreSQL databases both simple and powerful.Check if you run itEPSS 0.38%May 15, 2026
- High7.1Tabby (formerly Terminus) is a highly configurable terminal emulator.Check if you run itEPSS 0.24%May 15, 2026
- Medium6.9Traefik is an HTTP reverse proxy and load balancer.Check if you run itEPSS 0.50%May 15, 2026
- High7.3Oinone Pamirs 7.0.0 contains a command injection vulnerability in CommandHelper.executeCommands.Check if you run itEPSS 2.18%May 15, 2026
- High8.7Improper input validation in Delphix Continuous Data connectors allows an authenticated user to execute arbitrary operating system commands on the staging or target host.Check if you run itEPSS 0.40%May 15, 2026
- High7.0VMware Fusion contains a TOCTOU (Time-of-check Time-of-use) vulnerability that occurs during an operation performed by a SETUID binary.Check if you run itEPSS 0.11%May 15, 2026
- High8.5Cross-site request forgery vulnerability exists in Musetheque V4 Information Disclosure for IPKNOWLEDGE V4L1 rev2203.0 and earlier.Check if you run itEPSS 0.19%May 15, 2026
- High7.3Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a different p…Check if you run itEPSS 0.29%May 15, 2026
- High8.8Improper restriction of operations within the bounds of a memory buffer in the AMD secure processer (ASP) could allow an attacker to read or write to protected memory…Check if you run itEPSS 0.10%May 15, 2026
- High7.1Improperly preserved integrity of hardware configuration state during a power save/restore operation in the AMD Secure Processor (ASP) could allow an attacker with the…Check if you run itEPSS 0.10%May 15, 2026
- High8.8OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation.Check if you run itEPSS 0.45%May 14, 2026
- High8.7Crabbox prior to v0.12.0 contains an authentication bypass vulnerability that allows non-admin shared-token callers to impersonate other owners or organizations by spo…Check if you run itEPSS 0.69%May 14, 2026
- High8.1Live Helper Chat is an open-source application that enables live support websites.Check if you run itEPSS 0.38%May 14, 2026
- Critical9.2Strapi is an open source headless content management system.Check if you run itEPSS 2.52%May 14, 2026
- Critical9.1An issue was discovered in GStreamer gst-plugins-good before 1.28.2.Check if you run itEPSS 0.35%May 14, 2026
- Medium5.5An issue was discovered in GStreamer gst-plugins-good before 1.28.2.Check if you run itEPSS 0.14%May 14, 2026
- Medium4.3etcd is a distributed key-value store for the data of a distributed system.Check if you run itEPSS 0.27%May 14, 2026
- High7.5Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment.Check if you run itEPSS 0.46%May 14, 2026
- Medium6.3Distribution is a toolkit to pack, ship, store, and deliver container content.Check if you run itEPSS 0.29%May 14, 2026
- Medium5.4HCL AION is affected by a vulnerability where encryption is not enforced for certain data transmissions or operations.Check if you run itEPSS 0.05%May 14, 2026
- Medium5.1HCL AION is affected by a vulnerability where certain operations may trigger out-of-band interactions, potentially resulting in unintended disclosure of sensitive information.Check if you run itEPSS 0.11%May 14, 2026
- High8.6Gotenberg is a Docker-powered stateless API for PDF files.Check if you run itEPSS 0.42%May 14, 2026
- High8.8Stack buffer overflow in PostgreSQL module "refint" allows an unprivileged database user to execute arbitrary code as the operating system user running the database.Check if you run itEPSS 0.37%May 14, 2026