Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8NoMachine External Control of File Path Local Privilege Escalation Vulnerability.Check if you run itEPSS 0.22%Apr 11, 2026
- High7.1NoMachine External Control of File Path Arbitrary File Deletion Vulnerability.Check if you run itEPSS 0.15%Apr 11, 2026
- High7.3KeePassXC OpenSSL Configuration Uncontrolled Search Path Element Local Privilege Escalation Vulnerability.Check if you run itEPSS 0.23%Apr 11, 2026
- Medium6.3The frontend gRPC server's streaming interceptor chain did not include the authorization interceptor.Check if you run itEPSS 0.53%Apr 10, 2026
- Medium5.3FastGPT is an AI Agent building platform.Check if you run itEPSS 0.34%Apr 10, 2026
- Medium6.5Arcane is an interface for managing Docker containers, images, networks, and volumes.Patch nowKEVEPSS 0.62%Apr 10, 2026
- Low3.7phpseclib is a PHP secure communications library.Check if you run itEPSS 0.36%Apr 10, 2026
- Medium6.8ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies.Check if you run itEPSS 0.11%Apr 10, 2026
- Critical9.8LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform.Check if you run itEPSS 0.31%Apr 10, 2026
- Critical9.3goshs is a SimpleHTTPServer written in Go.Check if you run itEPSS 0.64%Apr 10, 2026
- High7.7Quarkus OpenAPI Generator is Quarkus' extensions for generation of Rest Clients and server stubs generation.Check if you run itEPSS 0.39%Apr 10, 2026
- High8.1Axios is a promise based HTTP client for the browser and Node.js.Check if you run itEPSS 1.95%Apr 10, 2026
- High8.2Postiz is an AI social media scheduling tool.Check if you run itEPSS 0.37%Apr 10, 2026
- Medium5.3GeoNode versions 4.4.5 and 5.0.2 (and prior within their respective releases) contain a server-side request forgery vulnerability in the service registration endpoint…Check if you run itEPSS 0.17%Apr 10, 2026
- Medium5.3GeoNode versions 4.0 before 4.4.5 and 5.0 before 5.0.2 contain a server-side request forgery vulnerability that allows authenticated users with document upload permiss…Check if you run itEPSS 0.22%Apr 10, 2026
- High7.7Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts.Check if you run itEPSS 0.29%Apr 10, 2026
- High7.8Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts.Check if you run itEPSS 0.24%Apr 10, 2026
- LowREDAXO has reflected XSS backend packages API via function parameter (CSRF token required)Check if you run itEPSS 0.18%Apr 10, 2026
- LowREDAXO has reflected XSS in backend Metainfo API via type parameter (CSRF token required)Check if you run itEPSS 0.18%Apr 10, 2026
- High8.7uv vulnerable to arbitrary file deletion through RECORD entriesCheck if you run itEPSS 0.35%Apr 10, 2026
- Medium6.5Chamilo LMS is a learning management system.Check if you run itEPSS 0.21%Apr 10, 2026
- Medium6.5Chamilo LMS is a learning management system.Check if you run itEPSS 0.21%Apr 10, 2026
- Critical9.8Chamilo LMS is a learning management system.Check if you run itEPSS 0.43%Apr 10, 2026
- High7.1Chamilo LMS is a learning management system.Check if you run itEPSS 0.17%Apr 10, 2026
- Medium5.3Chamilo LMS is a learning management system.Check if you run itEPSS 0.24%Apr 10, 2026
Sort