Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low3.5The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers.Check if you run itEPSS 0.25%May 14, 2026
- High7.7python-utcp is the python implementation of UTCP.Check if you run itEPSS 0.37%May 14, 2026
- High8.3python-utcp is the python implementation of UTCP.Check if you run itEPSS 0.35%May 14, 2026
- High8.7Elixir WebRTC is an Elixir implementation of the W3C WebRTC API.Check if you run itEPSS 0.40%May 14, 2026
- Medium6.3The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers.Check if you run itEPSS 0.29%May 14, 2026
- Medium5.1The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers.Check if you run itEPSS 0.24%May 14, 2026
- High7.1ClipBucket v5 is an open source video sharing platform.Check if you run itEPSS 0.34%May 14, 2026
- Medium6.9Fleet is open source device management software.Check if you run itEPSS 0.39%May 14, 2026
- Medium6.9Fleet is open source device management software.Check if you run itEPSS 0.43%May 14, 2026
- Critical9.4SiYuan is an open-source personal knowledge management system.Check if you run itEPSS 0.55%May 14, 2026
- High8.6Note Mark is an open-source note-taking application.Check if you run itEPSS 0.72%May 14, 2026
- Medium4.3Due to improper input handling under certain conditions, SAP NetWeaver Application Server ABAP allows an attacker to inject custom Cascading Style Sheets (CSS) data in…Check if you run itEPSS 0.29%May 14, 2026
- High8.2Fleet is open source device management software.Check if you run itEPSS 0.21%May 14, 2026
- Medium5.7Docling-Graph turns documents into validated Pydantic objects, then builds a directed knowledge graph with explicit semantic relationships.Check if you run itEPSS 0.31%May 14, 2026
- Medium6.3Distribution is a toolkit to pack, ship, store, and deliver container content.Check if you run itEPSS 0.29%May 14, 2026
- High7.6Valtimo is an open-source business process automation platform.Check if you run itEPSS 0.34%May 14, 2026
- High7.8DevSpace is a client-only developer tool for cloud-native development with Kubernetes.Check if you run itEPSS 0.15%May 14, 2026
- Critical9.6soundcloud-rpc is a SoundCloud Client with Discord Rich Presence, Dark Mode, Last.fm and AdBlock support.Check if you run itEPSS 0.61%May 14, 2026
- High8.8Use of inherently dangerous function PQfn(..., result_is_int=0, ...) in PostgreSQL libpq lo_export(), lo_read(), lo_lseek64(), and lo_tell64() functions allows the ser…Check if you run itEPSS 0.45%May 14, 2026
- High8.7Comarch ERP Optima client makes use of a hard-coded password for a database user.Check if you run itEPSS 0.23%May 14, 2026
- High7.5Comarch ERP Optima client connects to a database using a high privileged account regardless of an application account to which a user logs in.Check if you run itEPSS 0.11%May 14, 2026
- Medium4.3The LatePoint plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 5.3.2.Check if you run itEPSS 0.15%May 14, 2026
- Medium6.1The GLS Shipping for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'failed_orders' parameter in all versions up to, and incl…Check if you run itEPSS 0.29%May 14, 2026
- Medium5.4The WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect, Security & SSL Scan plugin for WordPress is vulnerable to unauthorized modification of data…Check if you run itEPSS 0.24%May 14, 2026
- Medium6.1The MapGeo – Interactive Geo Maps plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'map' parameter in the display-map shortcode in all vers…Check if you run itEPSS 0.20%May 14, 2026