Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2Astro is a web framework.Check if you run itEPSS 0.42%Feb 26, 2026
- High8.8Manyfold is an open source, self-hosted web application for managing a collection of 3d models, particularly focused on 3d printing.Check if you run itEPSS 0.57%Feb 26, 2026
- High7.2Vikunja is an open-source self-hosted task management platform.Check if you run itEPSS 0.90%Feb 25, 2026
- Medium4.8Rucio is a software framework that provides functionality to organize, manage, and access large volumes of scientific data using customizable policies.Check if you run itEPSS 0.47%Feb 25, 2026
- High7.4LangChain is a framework for building LLM-powered applications.Check if you run itEPSS 0.39%Feb 25, 2026
- High8.8OneUptime is a solution for monitoring and managing online services.Check if you run itEPSS 2.60%Feb 25, 2026
- High7.7Plane is an an open-source project management tool.Check if you run itEPSS 0.38%Feb 25, 2026
- Medium5.5A flaw was found in the udisks storage management daemon that allows unprivileged users to back up LUKS encryption headers without authorization.Check if you run itEPSS 0.10%Feb 25, 2026
- High7.1A flaw was found in the udisks storage management daemon that exposes a privileged D-Bus API for restoring LUKS encryption headers without proper authorization checks.Check if you run itEPSS 0.11%Feb 25, 2026
- Medium4.3The Post Duplicator plugin for WordPress is vulnerable to unauthorized arbitrary protected post meta insertion in all versions up to, and including, 3.0.8.Check if you run itEPSS 0.22%Feb 25, 2026
- Medium6.1Karakeep is a elf-hostable bookmark-everything app.Check if you run itEPSS 0.39%Feb 25, 2026
- Critical9.9OliveTin gives access to predefined shell commands from a web interface.Check if you run itEPSS 0.67%Feb 25, 2026
- High8.6WWBN AVideo is an open source video platform.Check if you run itEPSS 0.44%Feb 24, 2026
- Medium6.9Astro is a web framework.Check if you run itEPSS 1.98%Feb 24, 2026
- High8.8TOTOLINK X6000R v9.4.0cu.1498_B20250826 contains an OS command injection vulnerability in the NTPSyncWithHost handler of the /usr/sbin/shttpd executable.Check if you run itEPSS 1.86%Feb 23, 2026
- High8.0TOTOLink X5000R v9.1.0cu_2415_B20250515 contains an OS command injection vulnerability in the setIptvCfg handler of the /usr/sbin/lighttpd executable.Check if you run itEPSS 3.16%Feb 23, 2026
- Low1.1A vulnerability was identified in AliasVault App up to 0.25.3 on Android/iOS.Check if you run itEPSS 0.14%Feb 23, 2026
- Medium6.9OpenClaw is a personal AI assistant.Check if you run itEPSS 0.45%Feb 21, 2026
- High7.7Wallos is an open-source, self-hostable personal subscription tracker.Check if you run itEPSS 0.44%Feb 21, 2026
- Medium6.5Metabase is an open-source data analytics platform.Check if you run itEPSS 0.47%Feb 21, 2026
- Critical9.8SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles.Check if you run itEPSS 0.63%Feb 21, 2026
- Low3.5HCL Connections is vulnerable to information disclosure.Check if you run itEPSS 0.27%Feb 20, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: btrfs: do not strictly require dirty metadata threshold for metadata writepages [BUG] There is an i…Check if you run itEPSS 0.14%Feb 14, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: btrfs: send: check for inline extents in range_is_hole_in_parent() Before accessing the disk_bytenr…Check if you run itEPSS 0.14%Feb 14, 2026
- High7.7Notepad++ Download of Code Without Integrity Check VulnerabilityPatch nowKEVEPSS 1.77%Feb 2, 2026