Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7GitPython before 3.2.0 ReDoS via _re_actor_epoch in parse_actor_and_dateCheck if you run itEPSS 0.28%Oct 14, 2026
- High7.1GitPython before 3.2.0 Environment Variable Disclosure via .gitmodules Submodule NameCheck if you run itEPSS 0.23%Oct 14, 2026
- High8.2Parse Server before 8.6.97 and 9.0.0 before 9.10.2-alpha.6 does not handle errors raised while sending verification or password reset emails, causing the server process to exit.Check if you run itEPSS 0.26%Oct 14, 2026
- High7.1n8n before 1.123.83 Authorization Bypass via Execute Sub-workflow Inline JSONCheck if you run itEPSS 0.23%Oct 14, 2026
- Medium6.3n8n before 1.123.83, 2.41.4, and 2.42.1 Unauthenticated Workflow Execution via Dynamic-Path Webhook ResolutionCheck if you run itEPSS 0.36%Oct 14, 2026
- Medium6.1n8n before 2.41.4 and 2.42.1 Cross-Project Agent Ownership Transfer via Agents Create EndpointCheck if you run itEPSS 0.23%Oct 14, 2026
- High7.2n8n before 1.123.83, 2.41.4, and 2.42.1 Stored XSS via Binary-Data File PreviewCheck if you run itEPSS 0.24%Oct 14, 2026
- Medium6.0n8n before 1.123.83, 2.41.4, and 2.42.1 Prototype Pollution via AI Workflow Builder Connection MergeCheck if you run itEPSS 0.31%Oct 14, 2026
- High7.0n8n before 1.123.83, 2.41.4, and 2.42.1 Stored XSS via Chat Trigger customCss ParameterCheck if you run itEPSS 0.37%Oct 14, 2026
- High7.0n8n before 2.41.4 and 2.42.1 Send-and-Wait HMAC Signature Bypass via Waiting-WebhookCheck if you run itEPSS 0.51%Oct 14, 2026
- High7.7n8n before 1.123.83, 2.41.4, and 2.42.1 Code Execution via Git Node Log OperationCheck if you run itEPSS 0.34%Oct 14, 2026
- High7.2n8n before 1.123.83 Credential Authorization Bypass via Nested Inline Sub-WorkflowsCheck if you run itEPSS 0.28%Oct 14, 2026
- High8.2n8n before 2.41.4 and 2.42.1 Unauthenticated Unbounded OAuth Client Persistence via Authorize EndpointCheck if you run itEPSS 0.29%Oct 14, 2026
- UnknownCVE-2026-110816 affecting package python-tensorboard 2.16.2-6Open the advisoryOct 14, 2026
- Medium6.3qs.stringify with arrayFormat comma throws TypeError on array elements that cannot be coerced to a stringCheck if you run itEPSS 0.30%Oct 14, 2026
- High7.5In Omada Controller MSP mode, the user-confirmation endpoint fails to enforce the required permission check.Check if you run itEPSS 0.44%Oct 14, 2026
- Medium6.3A security vulnerability has been detected in Praat up to 7.0.02.Check if you run itEPSS 0.33%Oct 14, 2026
- Critical9.1When the default self-signed certificate is used, an attacker could gain administrative access to the application.Check if you run itEPSS 0.22%Oct 14, 2026
- Critical9.1When the password reset functionality is enabled, and email is configured, an attacker could take over any account using a brute-force attack.Check if you run itEPSS 0.24%Oct 14, 2026
- UnknownMalicious code in saeka (PyPI)Open the advisoryOct 14, 2026
- Medium6.9A weakness has been identified in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449.Check if you run itEPSS 0.41%Oct 14, 2026
- Medium5.3FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.Check if you run itEPSS 0.42%Oct 14, 2026
- Medium6.8FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.Check if you run itEPSS 0.32%Oct 14, 2026
- High8.1FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.Check if you run itEPSS 0.18%Oct 14, 2026
- Medium6.5FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.Check if you run itEPSS 0.31%Oct 14, 2026