Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3Geyser is a bridge between Minecraft: Bedrock Edition and Minecraft: Java Edition.Check if you run itEPSS 0.28%May 11, 2026
- High7.2WWBN AVideo is an open source video platform.Check if you run itEPSS 0.32%May 11, 2026
- High8.8Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software.Check if you run itEPSS 0.19%May 11, 2026
- Low3.7Microdot is a minimalistic Python web framework.Check if you run itEPSS 0.34%May 11, 2026
- Medium5.5ImageMagick is free and open-source software used for editing and manipulating digital images.Check if you run itEPSS 0.15%May 11, 2026
- Medium6.3Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in ninenines cowlib allows SSE event splitting and injection via unvalidated field values.Check if you run itEPSS 0.46%May 11, 2026
- Medium6.7Tookie is a advanced OSINT information gathering tool.Check if you run itEPSS 0.19%May 11, 2026
- Medium5.3An information disclosure vulnerability in dnsmasq allows remote attackers to bypass source checks via a crafted DNS packet with RFC 7871 client subnet information.Check if you run itEPSS 0.58%May 11, 2026
- Medium5.3pyLoad is a free and open-source download manager written in Python.Check if you run itEPSS 0.41%May 11, 2026
- Medium5.3Flowise is a drag & drop user interface to build a customized large language model flow.Check if you run itEPSS 0.48%May 11, 2026
- High8.1Neat VNC is a VNC server library.Check if you run itEPSS 0.76%May 11, 2026
- Low2.1Cookie Request Header Injection via Unvalidated Encoder in cow_cookie:cookie/1Check if you run itEPSS 0.21%May 11, 2026
- High7.7Grav is a file-based Web platform.Check if you run itEPSS 0.39%May 11, 2026
- High7.5In Meari client applications embedding "com.meari.sdk" (including CloudEdge 5.5.0 build 220, Arenti 1.8.1 build 220, and related white-label <= 1.8.x), the integrated…Check if you run itEPSS 0.41%May 11, 2026
- High7.5Docling's METS GBS backend is vulnerable to XML Entity Expansion (XXE) attacks thru 2.61.0.Check if you run itEPSS 0.49%May 11, 2026
- High7.1Local file inclusion (LFI) and server-side request forgery (SSRF) vulnerabilities in pgAdmin 4 LLM API configuration endpoints.Check if you run itEPSS 0.35%May 11, 2026
- High7.5Docling's JATS XML backend is vulnerable to XML Entity Expansion (XXE) attacks thru 2.61.0.Check if you run itEPSS 0.49%May 11, 2026
- High7.5docuFORM Managed Print Service Client 11.11c is vulnerable to a directory traversal allowing attackers to read arbitrary files via crafted url.Check if you run itEPSS 0.64%May 11, 2026
- Medium6.1docuFORM Managed Print Service Client 11.11c is vulnerable to a reflected cross site scripting attack via the login page of the application.Check if you run itEPSS 0.24%May 11, 2026
- Medium6.3docuFORM Managed Print Service Client 11.11c is vulnerable to arbitrary file upload via pmupdate.php.Check if you run itEPSS 0.27%May 11, 2026
- Medium5.4docuFORM Managed Print Service Client 11.11c is vulnerable to a session fixation attack via the login page of the application.Check if you run itEPSS 0.22%May 11, 2026
- Medium5.3Zephyr sockets created with can still negotiate a TLS 1.2 connection when both TLS versions are enabled in Kconfig, because the socket-level protocol selection is not…Check if you run itEPSS 0.24%May 11, 2026
- Medium5.5A vulnerability was identified in Industrial Application Software IAS Canias ERP 8.03.Check if you run itEPSS 0.68%May 10, 2026
- High8.8AzuraCast is a self-hosted, all-in-one web radio management suite.Check if you run itEPSS 0.57%May 9, 2026
- Medium6.3Quarkus OpenAPI Generator is Quarkus' extensions for generation of Rest Clients and server stubs generation.Check if you run itEPSS 0.66%May 9, 2026