Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Taskosaur is an open source project management platform with conversational AI for task execution in-app.Check if you run itEPSS 0.70%Mar 11, 2026
- Medium4.3OpenProject is an open-source, web-based project management software.Check if you run itEPSS 0.30%Mar 11, 2026
- Medium6.5OpenProject is an open-source, web-based project management software.Check if you run itEPSS 0.59%Mar 11, 2026
- High8.6An issue was discovered in Lantronix EDS3000PS 3.1.0.0R2.Check if you run itEPSS 0.43%Mar 11, 2026
- High8.7OpenClaw version 2026.2.22-2 prior to 2026.2.23 tools.exec.safeBins validation for sort command fails to properly validate GNU long-option abbreviations, allowing atta…Check if you run itEPSS 0.65%Mar 11, 2026
- Low2.7A flaw was found in Keycloak.Check if you run itEPSS 0.41%Mar 11, 2026
- High7.2Umbraco is an ASP.NET CMS.Check if you run itEPSS 0.48%Mar 10, 2026
- High7.4An improper neutralization of input vulnerability was identified in GitHub Enterprise Server that allowed DOM-based cross-site scripting via task list content.Check if you run itEPSS 0.18%Mar 10, 2026
- Medium6.1A Stored Cross-Site Scripting (XSS) vulnerability exists in the PluXml article comments feature for PluXml versions 5.8.22 and earlier.Check if you run itEPSS 0.23%Mar 10, 2026
- High8.7An improper neutralization of special elements vulnerability was identified in GitHub Enterprise Server that allowed an attacker with push access to a repository to ac…Check if you run itEPSS 1.50%Mar 10, 2026
- Medium5.9A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7).Check if you run itEPSS 0.14%Mar 10, 2026
- Critical9.4Affected devices do not properly sanitize contents of trace files.Check if you run itEPSS 0.48%Mar 10, 2026
- Medium4.6Flarum is open-source forum software.Check if you run itEPSS 0.30%Mar 10, 2026
- Medium6.5A low-privileged remote attacker can exploit the ubr-logread method in wwwubr.cgi to read arbitrary files on the system.Check if you run itEPSS 0.52%Mar 9, 2026
- High7.5Crypt::Sodium::XS versions through 0.001000 for Perl has potential integer overflows.Check if you run itEPSS 0.35%Mar 8, 2026
- Critical9.8Crypt::NaCl::Sodium versions through 2.002 for Perl has potential integer overflows.Check if you run itEPSS 0.78%Mar 8, 2026
- High7.5It was discovered that dpkg-deb (a component of dpkg, the Debian package management system) does not properly validate the end of the data stream when uncompressing a…Check if you run itEPSS 0.43%Mar 7, 2026
- Unknownzimaspace zimaos Improper AuthenticationPatch nowKEVEPSS 2.32%Mar 7, 2026
- Unknownrocketsoftware trufusion_enterprise Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 2.00%Mar 7, 2026
- High7.5crypto/x509: Incorrect enforcement of email constraints in crypto/x509Check if you run itEPSS 0.63%Mar 6, 2026
- High8.1Locutus brings stdlibs of other programming languages to JavaScript for educational purposes.Check if you run itEPSS 1.02%Mar 6, 2026
- High7.5An Absolute Path Traversal vulnerability exists in Navtor NavBox.Check if you run itEPSS 0.71%Mar 6, 2026
- High7.5The WooCommerce WordPress plugin from versions 5.4.0 to 10.5.2 does not properly handle batch requests, which could allow unauthenticated users to make a logged in adm…Check if you run itEPSS 0.19%Mar 6, 2026
- Critical9.8WWBN AVideo is an open source video platform.Check if you run itEPSS 1.42%Mar 6, 2026
- Medium6.4Chamilo is a learning management system.Check if you run itEPSS 0.18%Mar 6, 2026