Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.2Improper input validation in the dashboards-observability plugin in OpenSearch Dashboards allows a remote authenticated user with write permissions to OpenSearch Dashb…Check if you run itEPSS 0.52%Aug 21, 2026
- High8.2YOURLS is a self-hosted, customizable URL shortener written in PHP.Check if you run itEPSS 0.43%Aug 21, 2026
- Medium6.5Runtipi is a personal homeserver orchestrator.Check if you run itEPSS 0.61%Aug 21, 2026
- High7.7TensorZero is an open-source LLMOps platform that unifies an LLM gateway, observability, evaluation, optimization, and experimentation.Check if you run itEPSS 0.40%Aug 21, 2026
- High8.6Joomla Extension - j2commerce.com - Stored XSS in Guest checkout in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5 - J2Commerce 4.1.5 is vulnerable to Stored Cross-Si…Check if you run itEPSS 0.52%Aug 21, 2026
- Medium5.1Joomla Extension - j2commerce.com - Open redirect in cart controller in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5 - Four task handlers accepted a base64-encoded…Check if you run itEPSS 0.54%Aug 21, 2026
- Medium6.3Joomla Extension - j2commerce.com - Cross-customer order replication in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5 - An authenticated user could supply another cu…Check if you run itEPSS 0.41%Aug 21, 2026
- High8.7Joomla Extension - j2commerce.com - Order content disclosure J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5 - An unauthenticated visitor could supply any order_id as…Check if you run itEPSS 0.41%Aug 21, 2026
- Medium5.3Joomla Extension - j2commerce.com - Download quota manipulation in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5 - An authenticated user with a valid order token cou…Check if you run itEPSS 0.19%Aug 21, 2026
- High7.4Git for Windows is the Windows port of Git.Check if you run itEPSS 0.46%Aug 21, 2026
- Medium5.3SpecifyJS is a declarative TypeScript user interface framework.Check if you run itEPSS 0.49%Aug 21, 2026
- High8.7SpecifyJS is a declarative TypeScript user interface framework.Check if you run itEPSS 0.48%Aug 21, 2026
- High7.5Combodo iTop is a web based IT service management tool.Check if you run itEPSS 0.46%Aug 21, 2026
- High7.3Combodo iTop is a web based IT service management tool.Check if you run itEPSS 0.37%Aug 21, 2026
- High7.5Combodo iTop is a web based IT service management tool.Check if you run itEPSS 0.43%Aug 21, 2026
- Medium5.3Combodo iTop is a web based IT service management tool.Check if you run itEPSS 0.34%Aug 21, 2026
- High7.5Combodo iTop is a web based IT service management tool.Check if you run itEPSS 0.43%Aug 21, 2026
- Medium5.3A vulnerability was identified in Dromara RuoYi-Vue-Plus up to 5.6.2.Check if you run itEPSS 0.35%Aug 21, 2026
- Medium4.1Unleash is an open-source feature management platform.Check if you run itEPSS 0.32%Aug 21, 2026
- High7.5Unleash is an open-source feature management platform.Check if you run itEPSS 0.70%Aug 21, 2026
- Medium5.5Unleash is an open-source feature management platform.Check if you run itEPSS 0.39%Aug 21, 2026
- Medium5.3Element Web is a Matrix web client built using the Matrix React SDK.Check if you run itEPSS 0.55%Aug 21, 2026
- High8.2DiscordChatExporter saves Discord chat logs to a file.Check if you run itEPSS 0.20%Aug 21, 2026
- Medium4.1DiscordChatExporter saves Discord chat logs to a file.Check if you run itEPSS 0.16%Aug 21, 2026
- High7.0OctoPrint provides a web interface for controlling consumer 3D printers.Check if you run itEPSS 0.32%Aug 21, 2026
Sort