Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.6Mantis Bug Tracker (MantisBT) is an open source issue tracker.Check if you run itEPSS 0.44%May 19, 2026
- High8.1CtrlPanel is open-source billing software for hosting providers.Check if you run itEPSS 0.30%May 19, 2026
- Medium4.8CtrlPanel is open-source billing software for hosting providers.Check if you run itEPSS 0.22%May 19, 2026
- High8.7CtrlPanel is open-source billing software for hosting providers.Check if you run itEPSS 0.35%May 19, 2026
- Medium5.1Ledger Nano X, Flex, and Stax devices contain a denial of service vulnerability in the MCU firmware update process due to missing validation of the reset_handler param…Check if you run itEPSS 0.21%May 19, 2026
- Medium6.9Ledger Live with vulnerable versions of ledgerhq/hw-app-eth prior to 6.34.7 contains an integer parsing vulnerability that allows attackers to manipulate EIP-712 typed…Check if you run itEPSS 0.26%May 19, 2026
- Medium6.5CtrlPanel is open-source billing software for hosting providers.Check if you run itEPSS 0.28%May 19, 2026
- Medium6.6CtrlPanel is open-source billing software for hosting providers.Check if you run itEPSS 0.53%May 19, 2026
- High7.1libheif is a HEIF and AVIF file format decoder and encoder.Check if you run itEPSS 0.71%May 19, 2026
- Medium6.5libheif is a HEIF and AVIF file format decoder and encoder.Check if you run itEPSS 0.31%May 19, 2026
- High7.1libheif is a HEIF and AVIF file format decoder and encoder.Check if you run itEPSS 0.34%May 19, 2026
- Medium5.5Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks.Check if you run itEPSS 0.16%May 19, 2026
- Medium5.3In the AWS Secrets Manager and SSM Parameter Store secrets backends of prior to 9.28.0, the team-scoping logic could resolve a containing a (e.g.Check if you run itEPSS 0.41%May 19, 2026
- High8.8libheif is a HEIF and AVIF file format decoder and encoder.Check if you run itEPSS 0.68%May 19, 2026
- High8.7JWT tokens that were used by workers in Kubernetes Executors have been exposed to users who had read only access to Kuberentes Pods.Check if you run itEPSS 0.16%May 19, 2026
- High8.5Execution with unnecessary privileges vulnerability in Broadcom Automic Automation Agent Unix on Linux x64, Linux Power 64 BE, Linux Power 64 LE, zLinux (zSeries), AIX…Check if you run itEPSS 0.15%May 19, 2026
- Medium6.5The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.0.6.Check if you run itEPSS 0.40%May 19, 2026
- High8.2LIVE555 before 2026.04.22 contains an authorization bypass vulnerability in RTSP session command handling that allows attackers to replay valid Session tokens from una…Check if you run itEPSS 0.48%May 19, 2026
- Low2.1Discourse is an open-source discussion platform.Check if you run itEPSS 0.21%May 19, 2026
- High8.6Windmill prior to 1.703.2 contains an incorrect default permissions vulnerability in nsjail sandbox configuration files where /etc is bind-mounted without read-write r…Check if you run itEPSS 0.28%May 19, 2026
- High8.8Kitty is a cross-platform GPU based terminal.Check if you run itEPSS 0.38%May 19, 2026
- Critical9.2Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via external URL resolution in uploaded IaC templates when running in server mode.Check if you run itEPSS 0.48%May 19, 2026
- High8.7Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via the webhook_url parameter in the file scan endpoint (POST /v1/{iac}/{iacVersion}/{…Check if you run itEPSS 0.50%May 19, 2026
- High8.4An improper authentication vulnerability was discovered in the Motorola Factory Test component (com.motorola.motocit).Check if you run itEPSS 0.31%May 19, 2026
- Critical9.8The JSONSerializer and CBORSerializer in APScheduler (all versions including 3.10.x and 4.0.0a5) are vulnerable to Remote Code Execution (RCE) via Insecure Deserialization.Check if you run itEPSS 0.81%May 19, 2026
Sort