Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.1The Gramps Web API is a Python REST API for the genealogical research software Gramps.Check if you run itEPSS 0.40%Apr 17, 2026
- High8.8libcoap contains out-of-bounds read vulnerabilities in OSCORE Appendix B.2 CBOR unwrap handling where get_byte_inc() in src/oscore/oscore_cbor.c relies solely on asser…Check if you run itEPSS 0.30%Apr 17, 2026
- High8.5radare2 prior to commit bc5a890 contains a command injection vulnerability in the afsv/afsvj command path where crafted ELF binaries can embed malicious r2 command seq…Check if you run itEPSS 0.92%Apr 17, 2026
- Medium6.1zrok is software for sharing web services, files, and network resources.Check if you run itEPSS 0.21%Apr 17, 2026
- High7.5WeGIA is a web manager for charitable institutions.Check if you run itEPSS 0.21%Apr 17, 2026
- High8.8WeGIA is a web manager for charitable institutions.Check if you run itEPSS 0.32%Apr 17, 2026
- High8.1HomeBox is a home inventory and organization system.Check if you run itEPSS 0.25%Apr 17, 2026
- Low2.3mcp-neo4j-cypher is an MCP server for executing Cypher queries against Neo4j databases.Check if you run itEPSS 0.26%Apr 17, 2026
- Medium6.1Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files.Check if you run itEPSS 0.17%Apr 17, 2026
- Critical9.4Dolibarr is an enterprise resource planning (ERP) and customer relationship management (CRM) software package.Check if you run itEPSS 0.92%Apr 17, 2026
- Critical9.8Anviz CX2 Lite and CX7 are vulnerable to unauthenticated firmware uploads.Check if you run itEPSS 0.59%Apr 17, 2026
- High7.7xrdp is an open source RDP server.Check if you run itEPSS 0.43%Apr 17, 2026
- High7.5Anviz CrossChex Standard is vulnerable when an attacker manipulates the TDS7 PreLogin to disable encryption, causing database credentials to be sent in plaintext and e…Check if you run itEPSS 0.21%Apr 17, 2026
- Medium5.3Anviz CX2 Lite and CX7 are vulnerable to unauthenticated access that discloses debug configuration details (e.g., SSH/RTTY status), assisting attackers in reconnaissan…Check if you run itEPSS 0.25%Apr 17, 2026
- Medium6.3xrdp is an open source RDP server.Check if you run itEPSS 0.41%Apr 17, 2026
- High7.7xrdp is an open source RDP server.Check if you run itEPSS 0.54%Apr 17, 2026
- Critical9.1OpenViking prior to version 0.3.9 contains an authentication bypass vulnerability in the VikingBot OpenAPI HTTP route surface where the authentication check fails open…Check if you run itEPSS 0.57%Apr 17, 2026
- Medium6.0Firebird is an open-source relational database management system.Check if you run itEPSS 1.13%Apr 17, 2026
- High7.5Firebird is an open-source relational database management system.Check if you run itEPSS 0.50%Apr 17, 2026
- High8.1The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file upload in versions up to, and including, 1.3.9.7.Patch nowKEVEPSS 4.17%Apr 17, 2026
- High7.5The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to Path Traversal leading to Arbitrary File Read in versions up to and inc…Check if you run itEPSS 0.69%Apr 17, 2026
- Medium5.4Giskard is an open-source testing framework for AI models.Check if you run itEPSS 0.14%Apr 17, 2026
- Low1.0Giskard is an open-source testing framework for AI models.Check if you run itEPSS 0.15%Apr 17, 2026
- High7.1ByteDance DeerFlow before commit 2176b2b contains a path traversal and arbitrary file write vulnerability in bootstrap-mode custom-agent creation where the agent name…Check if you run itEPSS 0.36%Apr 17, 2026
- High7.8OpenHarness before commit bd4df81 contains a server-side request forgery vulnerability in the web_fetch and web_search tools that allows attackers to access private an…Check if you run itEPSS 0.18%Apr 17, 2026
Sort