Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.6Joomla Extension - yootheme.com - Missing CSRF tokens on front-end state changes in Zoo < 4.1.66Check if you run itEPSS 0.21%Aug 21, 2026
- Critical9.8In Spring AI's tool calling support, the per-request tool list is advertised to the model as a boundary but is not fully enforced when a tool call is dispatched.Check if you run itEPSS 0.25%Aug 21, 2026
- Critical9.8SPIP before 4.4.21 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026.Patch nowKEVEPSS 4.48%Aug 21, 2026
- Critical9.8GeoTools is an open source Java library that provides tools for geospatial data.Patch nowKEVEPSS 3.98%Aug 21, 2026
- UnknownCVE-2026-8717Open the advisoryAug 20, 2026
- Medium4.8Coder before 2.34.2 Stored HTML Injection via Appearance SettingsCheck if you run itEPSS 0.17%Aug 20, 2026
- Medium6.3Coder before 2.34.2 User Enumeration via Login Placeholder HashCheck if you run itEPSS 0.22%Aug 20, 2026
- High7.4A flaw was found in WildFly Elytron.Check if you run itEPSS 0.89%Aug 20, 2026
- UnknownCVE-2026-76632Open the advisoryAug 20, 2026
- Critical9.6A flaw was found in FreeIPA.Check if you run itEPSS 0.35%Aug 20, 2026
- High7.5A flaw was found in FreeIPA.Check if you run itEPSS 0.54%Aug 20, 2026
- High8.7A privilege escalation flaw was found in FreeIPA.Check if you run itEPSS 0.61%Aug 20, 2026
- High7.5A flaw was found in FreeIPA.Check if you run itEPSS 0.54%Aug 20, 2026
- Medium5.7Punk::OAuth2 versions before 0.03 for Perl allow an attacker-chosen off-site redirect after login because same_origin_path accepts a backslash or tab in the return parameter.Check if you run itEPSS 0.50%Aug 20, 2026
- High7.0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privi…Check if you run itEPSS 0.20%Aug 19, 2026
- Medium5.3Koel is a free, open-source music streaming solution.Check if you run itEPSS 0.43%Aug 19, 2026
- High7.7Koel is a free, open-source music streaming solution.Check if you run itEPSS 0.41%Aug 19, 2026
- Medium4.3Koel is a free, open-source music streaming solution.Check if you run itEPSS 0.41%Aug 19, 2026
- High7.1Koel is a free, open-source music streaming solution.Check if you run itEPSS 0.38%Aug 19, 2026
- Medium6.5Wekan is open source kanban built with Meteor.Check if you run itEPSS 0.53%Aug 19, 2026
- High7.6Wekan is open source kanban built with Meteor.Check if you run itEPSS 0.35%Aug 19, 2026
- High8.7Wekan is open source kanban built with Meteor.Check if you run itEPSS 0.53%Aug 19, 2026
- High8.8Wekan is open source kanban built with Meteor.Check if you run itEPSS 0.51%Aug 19, 2026
- High7.7Wekan is open source kanban built with Meteor.Check if you run itEPSS 0.58%Aug 19, 2026
- Medium6.5Wekan is open source kanban built with Meteor.Check if you run itEPSS 0.40%Aug 19, 2026
Sort