Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1ChurchCRM is an open-source church management system.Check if you run itEPSS 0.12%May 12, 2026
- Critical9.6ChurchCRM is an open-source church management system.Check if you run itEPSS 0.21%May 12, 2026
- Medium5.3GoJobs is a REST API for a Job Board platform.Check if you run itEPSS 0.24%May 12, 2026
- Critical10.0ChurchCRM is an open-source church management system.Check if you run itEPSS 0.58%May 12, 2026
- Medium5.1Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investigation, transparency, and verification.Check if you run itEPSS 0.28%May 12, 2026
- Critical9.0Thymeleaf is a server-side Java template engine for web and standalone environments.Check if you run itEPSS 0.43%May 12, 2026
- High8.7Heym before 0.0.21 contains a sandbox escape vulnerability in the custom Python tool executor that allows authenticated workflow authors to bypass sandbox restrictions…Check if you run itEPSS 0.23%May 12, 2026
- High7.6Heym before 0.0.21 contains an authorization bypass vulnerability in workflow execution that allows authenticated users to execute arbitrary workflows by referencing v…Check if you run itEPSS 0.29%May 12, 2026
- High7.2Heym before 0.0.21 contains a path traversal vulnerability in the file upload endpoint that allows authenticated users to write attacker-controlled files to arbitrary…Check if you run itEPSS 0.36%May 12, 2026
- Medium5.3Statamic is a Laravel and Git powered content management system (CMS).Check if you run itEPSS 0.21%May 12, 2026
- Medium6.2Hugo is a static site generator.Check if you run itEPSS 0.27%May 12, 2026
- High7.5Deskflow is a keyboard and mouse sharing app.Check if you run itEPSS 0.28%May 12, 2026
- Critical9.3efw4.X is an Enterprise Framework for Web.Check if you run itEPSS 0.29%May 12, 2026
- Critical9.9wger is a free, open-source workout and fitness manager.Check if you run itEPSS 0.37%May 12, 2026
- High7.5Granian is a Rust HTTP server for Python applications.Check if you run itEPSS 0.32%May 12, 2026
- High7.5PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files.Check if you run itEPSS 0.40%May 12, 2026
- High7.5PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files.Check if you run itEPSS 0.40%May 12, 2026
- High8.6Wing FTP Server before 8.1.3 contains an authenticated remote code execution vulnerability in the session serialization mechanism that allows authenticated administrat…Check if you run itEPSS 2.64%May 12, 2026
- High7.5basic-ftp is an FTP client for Node.js.Check if you run itEPSS 0.46%May 12, 2026
- High8.6Wiki.js is an open source wiki app built on Node.js.Check if you run itEPSS 0.38%May 12, 2026
- High8.6Craft CMS is a content management system (CMS).Check if you run itEPSS 0.53%May 12, 2026
- Medium5.1PowerSYSTEM Center email notification service is affected by a CRLF injection vulnerability when using SMTPS communication.Check if you run itEPSS 0.27%May 12, 2026
- Critical9.8Exim before 4.99.3, in certain GnuTLS configurations, has a remotely reachable use-after-free in the BDAT body parsing path.Check if you run itEPSS 1.27%May 12, 2026
- Medium4.9A vulnerability exists in the web-based management interface of an AOS-10 Gateway that could allow an authenticated remote attacker to access sensitive files on the un…Check if you run itEPSS 0.30%May 12, 2026
- Medium5.4A session management vulnerability in AOS-8 allows previously authenticated users to retain network access after their accounts are administratively disabled.Check if you run itEPSS 0.14%May 12, 2026
Sort