Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3The asset dependency graph did not restrict nodes by the viewer's DAG read permissions: a user with read access to at least one DAG could browse the asset graph for an…Check if you run itEPSS 0.35%Apr 24, 2026
- Medium4.3The authenticated /ui/dags endpoint did not enforce per-DAG access control on embedded Human-in-the-Loop (HITL) and TaskInstance records: a logged-in Airflow user with…Check if you run itEPSS 0.35%Apr 24, 2026
- Low2.4AdaptiveGRC is vulnerable to Stored XSS via text type fields across the forms.Check if you run itEPSS 0.59%Apr 24, 2026
- High8.5A client holding only a read JWT scope can still register itself as a signal provider through the production kuksa.val.v2 OpenProviderStream API by sending ProvideSignalRequest.Check if you run itEPSS 0.32%Apr 24, 2026
- High7.5Tempo queries with large limits can cause large memory allocations which can impact the availability of the service, depending on its deployment strategy.Check if you run itEPSS 0.64%Apr 24, 2026
- Medium5.3The Liaison Site Prober plugin for WordPress is vulnerable to Information Exposure in all versions up to and including 1.2.1 via the /wp-json/site-prober/v1/logs REST API endpoint.Check if you run itEPSS 0.37%Apr 24, 2026
- Medium4.3The HubSpot All-In-One Marketing - Forms, Popups, Live Chat plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including,…Check if you run itEPSS 0.19%Apr 24, 2026
- Medium6.4The Royal Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image captions in the Image Grid/Slider/Carousel widget in versions up…Check if you run itEPSS 0.26%Apr 24, 2026
- High8.7DWM-222W USB Wi-Fi Adapter developed by D-Link has a Brute-Force Protection Bypass vulnerability, allowing unauthenticated adjacent network attackers to bypass login a…Check if you run itEPSS 0.57%Apr 24, 2026
- Medium4.3The BetterDocs plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 4.3.11.Check if you run itEPSS 0.27%Apr 24, 2026
- Medium5.9MailKit is a cross-platform mail client library built on top of MimeKit.Check if you run itEPSS 0.22%Apr 24, 2026
- Medium5.4AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.Check if you run itEPSS 0.19%Apr 24, 2026
- High7.7Kyverno is a policy engine designed for cloud native platform engineering teams.Check if you run itEPSS 0.27%Apr 24, 2026
- Medium6.1FreeRDP is a free implementation of the Remote Desktop Protocol.Check if you run itEPSS 0.20%Apr 24, 2026
- High8.8Actual is a local-first personal finance tool.Check if you run itEPSS 0.47%Apr 24, 2026
- High8.7OP-TEE is a Trusted Execution Environment (TEE) designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology.Check if you run itEPSS 0.18%Apr 24, 2026
- High7.4Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers.Check if you run itEPSS 0.66%Apr 24, 2026
- High7.1Kirby is an open-source content management system.Check if you run itEPSS 0.36%Apr 24, 2026
- Medium6.9Kirby is an open-source content management system.Check if you run itEPSS 0.35%Apr 24, 2026
- Medium4.3Xibo is an open source digital signage platform with a web content management system and Windows display player software.Check if you run itEPSS 0.27%Apr 24, 2026
- Critical9.3A vulnerability in SenseLive X3050’s web management interface allows unauthorized access to certain configuration endpoints due to improper access control enforcement.Check if you run itEPSS 0.73%Apr 24, 2026
- High7.2A vulnerability in SenseLive X3050's web management interface allows critical system and network configuration parameters to be modified without sufficient validation…Check if you run itEPSS 0.32%Apr 24, 2026
- Critical9.3A vulnerability exists in SenseLive X3050’s web management interface in which password updates are not reliably applied due to improper handling of credential changes…Check if you run itEPSS 0.39%Apr 24, 2026
- Critical9.3A vulnerability in SenseLive X3050’s web management interface allows authentication logic to be performed entirely on the client side, relying on hardcoded values with…Check if you run itEPSS 0.55%Apr 24, 2026
- High8.1Xibo is an open source digital signage platform with a web content management system and Windows display player software.Check if you run itEPSS 0.25%Apr 24, 2026
Sort