Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client.Check if you run itEPSS 0.11%May 28, 2026
- High8.7pyLoad is a free and open-source download manager written in Python.Check if you run itEPSS 0.20%May 28, 2026
- Critical9.6MeshCore Card provides MeshCore Lovelace card for Home Assistant.Check if you run itEPSS 0.32%May 28, 2026
- Critical9.6CodeWhale is a DeepSeek + MiMo coding agent in terminal.Check if you run itEPSS 0.57%May 28, 2026
- High7.4CodeWhale is a DeepSeek + MiMo coding agent in terminal.Check if you run itEPSS 0.28%May 28, 2026
- Medium6.1Speakr is a personal, self-hosted web application designed for transcribing audio recordings.Check if you run itEPSS 0.18%May 28, 2026
- Medium6.5pyLoad is a free and open-source download manager written in Python.Check if you run itEPSS 0.23%May 28, 2026
- Medium5.3OpenReplay is a self-hosted session replay suite.Check if you run itEPSS 0.21%May 28, 2026
- High7.7OpenReplay is a self-hosted session replay suite.Check if you run itEPSS 0.23%May 28, 2026
- Critical9.4electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client.Check if you run itEPSS 0.23%May 28, 2026
- Medium5.1Kuma is a modern Envoy-based service mesh that can run on every cloud across both Kubernetes and VMs.Check if you run itEPSS 0.20%May 28, 2026
- High7.1Nautobot is a Network Source of Truth and Network Automation Platform.Check if you run itEPSS 0.28%May 28, 2026
- High8.5Nautobot is a Network Source of Truth and Network Automation Platform.Check if you run itEPSS 0.24%May 28, 2026
- Medium6.5Nautobot is a Network Source of Truth and Network Automation Platform.Check if you run itEPSS 0.31%May 28, 2026
- Medium5.4Nautobot is a Network Source of Truth and Network Automation Platform.Check if you run itEPSS 0.18%May 28, 2026
- Critical10.0SandboxJS is a JavaScript sandboxing library.Check if you run itEPSS 0.47%May 28, 2026
- High7.3TP-Link has identified a vulnerability in Tapo L535E v1.0 and v3.0, Tapo P300 v1.0, and Tapo D100C v1.0, where Bluetooth communication during the initial setup phase i…Check if you run itEPSS 0.10%May 28, 2026
- Critical9.1In Casdoor versions 2.362.0 and earlier, the SAML callback handler in controllers/auth.go accepts any well-formed SAMLResponse sent to /api/acs without verifying that…Check if you run itEPSS 0.23%May 28, 2026
- Critical9.8Casdoor versions 2.362.0 and earlier do not verify that a JWT used for token exchange is still active.Check if you run itEPSS 0.40%May 28, 2026
- High7.5Casdoor versions 2.362.0 and earlier do not enforce SAML assertion time bounds.Check if you run itEPSS 0.33%May 28, 2026
- High8.1Casdoor versions 2.362.0 and earlier map SAML assertions to user sessions without replay protection.Check if you run itEPSS 0.30%May 28, 2026
- Critical9.8Casdoor versions 2.362.0 and earlier contain a vulnerability enabling cross-organization token exchange.Check if you run itEPSS 0.42%May 28, 2026
- Critical9.8In Casdoor versions 2.362.0 and earlier, the SAML service provider implementation does not validate the AudienceRestriction element in SAML assertions.Check if you run itEPSS 0.36%May 28, 2026
- Critical9.1Casdoor versions 2.362.0 and earlier contain a vulnerability involving unverified email binding that may enable account takeover.Check if you run itEPSS 0.32%May 28, 2026
- Medium5.3Casdoor versions 2.362.0 and earlier contain a logic flaw in the social‑login binding flow that allows users to bypass configured MFA requirements.Check if you run itEPSS 0.32%May 28, 2026
Sort