Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7HS Brand Logo Slider 2.1 contains an unrestricted file upload vulnerability that allows authenticated users to bypass client-side file extension validation by uploadin…Check if you run itEPSS 0.54%May 16, 2026
- High7.1Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Check if you run itEPSS 0.39%May 15, 2026
- High8.7radare2 6.1.5 contains a use-after-free vulnerability in the gdbr_pids_list() function within the GDB client core that allows remote attackers to cause a denial of ser…Check if you run itEPSS 1.03%May 15, 2026
- High8.5Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Check if you run itEPSS 0.33%May 15, 2026
- Medium5.3Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Check if you run itEPSS 0.81%May 15, 2026
- High8.1Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Check if you run itEPSS 0.43%May 15, 2026
- Medium6.5Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 Fail to validate the response body of proxied images, which allows a remote attacker to ena…Check if you run itEPSS 0.42%May 15, 2026
- Medium5.1phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in SvgSanitizer::decodeAllEntities() that limits recursive entity decoding to 5 iterations,…Check if you run itEPSS 0.26%May 15, 2026
- High7.0phpMyFAQ before 4.1.2 contains a path traversal vulnerability in Client::deleteClientFolder that allows admins with INSTANCE_DELETE permission to delete arbitrary directories.Check if you run itEPSS 0.48%May 15, 2026
- High7.4Microsoft APM is an open-source, community-driven dependency manager for AI agents.Check if you run itEPSS 1.06%May 15, 2026
- High7.1Tabby (formerly Terminus) is a highly configurable terminal emulator.Check if you run itEPSS 0.24%May 15, 2026
- Critical9.4Tabby (formerly Terminus) is a highly configurable terminal emulator.Check if you run itEPSS 0.48%May 15, 2026
- Low3.5is GitHub’s official command line tool.Check if you run itEPSS 0.31%May 15, 2026
- Medium5.1Turborepo is a high-performance build system for JavaScript and TypeScript codebases.Check if you run itEPSS 0.18%May 15, 2026
- High7.5ws is an open source WebSocket client and server for Node.js.Check if you run itEPSS 0.68%May 15, 2026
- Medium4.3The Notify Odoo plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1.Check if you run itEPSS 0.20%May 15, 2026
- Medium6.4The Advanced Custom Fields: Font Awesome plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 5.0.2.Check if you run itEPSS 0.35%May 15, 2026
- Low2.1The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers.Check if you run itEPSS 0.27%May 14, 2026
- None0.0The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers.Check if you run itEPSS 0.44%May 14, 2026
- Low3.5The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers.Check if you run itEPSS 0.25%May 14, 2026
- High7.7python-utcp is the python implementation of UTCP.Check if you run itEPSS 0.37%May 14, 2026
- High8.3python-utcp is the python implementation of UTCP.Check if you run itEPSS 0.35%May 14, 2026
- High8.7Elixir WebRTC is an Elixir implementation of the W3C WebRTC API.Check if you run itEPSS 0.40%May 14, 2026
- Medium6.3The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers.Check if you run itEPSS 0.29%May 14, 2026
- Medium5.1The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers.Check if you run itEPSS 0.24%May 14, 2026