Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7Twenty is an open source CRM.Check if you run itEPSS 0.26%May 26, 2026
- Critical9.9Vowpal Wabbit is a machine learning system.Check if you run itEPSS 0.47%May 26, 2026
- High7.6MikroORM is a TypeScript ORM for Node.js based on Data Mapper, Unit of Work and Identity Map patterns.Check if you run itEPSS 1.45%May 26, 2026
- Medium4.3Bugsink is a self-hosted error tracking tool.Check if you run itEPSS 0.29%May 26, 2026
- Medium5.3Traccar is an open source GPS tracking system.Check if you run itEPSS 0.18%May 26, 2026
- High8.7Algernon is a small self-contained pure-Go web server.Check if you run itEPSS 0.34%May 26, 2026
- High8.2Algernon is a small self-contained pure-Go web server.Check if you run itEPSS 0.18%May 26, 2026
- Medium5.9An improper validation of the search parameter of the com_media files API endpoint leads to a path traversal vulnerability.Check if you run itEPSS 0.52%May 26, 2026
- High7.5An improper validation of user-supplied input leads to a local file inclusion vulnerability.Check this weekEPSS 12.52%May 26, 2026
- High8.6An improper access check allows unauthorized access to com_config webservice endpoints.Check this weekEPSS 12.79%May 26, 2026
- Medium6.9Improperly validated order clauses lead to a SQL injection vulnerability in com_tags.Check if you run itEPSS 0.31%May 26, 2026
- Medium6.9Improperly built filter clauses lead to a SQL injection vulnerability in the search query for com_finder.Check if you run itEPSS 0.32%May 26, 2026
- Medium4.6Lack of CSRF token validation lead to a CSRF attack vector in the admin activation endpoint of com_users.Check if you run itEPSS 0.11%May 26, 2026
- Medium6.9Lack of output escaping leads to a XSS vector in the readmore links for com_content.Check if you run itEPSS 0.18%May 26, 2026
- Medium6.9Lack of output escaping leads to a XSS vector in the content history component.Check if you run itEPSS 0.18%May 26, 2026
- Critical9.2A vulnerability in the Google Cloud Apigee SetIntegrationRequest policy allowed remote attackers to perform Server-Side Request Forgery (SSRF) and exfiltrate service a…Check if you run itEPSS 0.36%May 26, 2026
- Medium6.9Lack of output escaping leads to a XSS vector in the multilingual associations component.Check if you run itEPSS 0.18%May 26, 2026
- Medium6.9Lack of output escaping leads to a XSS vector in the feed modules.Check if you run itEPSS 0.18%May 26, 2026
- Critical9.8NVIDIA Isaac Launchable for Linux contains a vulnerability where sensitive information is transmitted in clear text.Check if you run itEPSS 0.66%May 26, 2026
- High7.8NVIDIA Transformers4Rec for Linux contains a vulnerability where an attacker could cause improper deserialization of untrusted data.Check if you run itEPSS 0.42%May 26, 2026
- High7.5IBM Cloud Pak for Data System - Cyclops 11.3.0.2 through Interim Fix 002 IBM Cloud Pak for Data System uses default passwords default passwords from the manufacturing…Check if you run itEPSS 0.27%May 26, 2026
- Critical9.8IBM Cloud Pak for Data System - Cyclops 11.3.0.2 through Interim Fix 002 IBM Cloud Pak for Data System is vulnerable to SQL injection.Check if you run itEPSS 0.31%May 26, 2026
- Medium6.1IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4.0 through 3.2.4.15 IBM Financial Transaction Manager SWIFT is vulnerable to cross-site scripting.Check if you run itEPSS 0.19%May 26, 2026
- Medium5.3IBM watsonx.data 2.2 through 2.3.1 IBM Lakehouse does not properly restrict inbound and outbound connections which could allow an attacker to transfer or modify files…Check if you run itEPSS 0.17%May 26, 2026
- High7.6IBM Cognos Analytics 11.2.0, 12.0, and 12.1.0 and IBM Cognos Transformer 12.0, 11.2.4, and 12.1.0 is vulnerable to stored cross-site scripting (XSS) in Cognos Adminstration.Check if you run itEPSS 0.18%May 26, 2026
Sort