Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.9Sonicverse is a Self-hosted Docker Compose stack for live radio streaming.Check if you run itEPSS 0.23%Apr 9, 2026
- Critical9.6PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.42%Apr 9, 2026
- Medium5.3LangChain is a framework for building agents and LLM-powered applications.Check if you run itEPSS 0.26%Apr 9, 2026
- Low3.1Beszel is a server monitoring platform.Check if you run itEPSS 0.22%Apr 9, 2026
- Medium6.5CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled and FFM is used in Apache Tomcat.Check if you run itEPSS 0.45%Apr 9, 2026
- High7.8The pstrip64.sys driver in EnTech Taiwan PowerStrip <=3.90.736 allows local users to escalate privileges to SYSTEM via a crafted IOCTL request enabling unprivileged us…Check if you run itEPSS 0.14%Apr 9, 2026
- Critical9.1CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled vulnerability in Apache Tomcat, Apache Tomcat Native.Check if you run itEPSS 0.71%Apr 9, 2026
- Medium6.1Occasional URL redirection to untrusted Site ('Open Redirect') vulnerability in Apache Tomcat via the LoadBalancerDrainingValve.Check if you run itEPSS 0.53%Apr 9, 2026
- Critical9.3An attacker could use data obtained by sniffing the network traffic to forge packets in order to make arbitrary requests to Contemporary Controls BASC 20T.Check if you run itEPSS 0.44%Apr 9, 2026
- Critical9.1V2Board 1.6.1 through 1.7.4 and Xboard through 0.1.9 expose authentication tokens in HTTP response bodies of the loginWithMailLink endpoint when the login_with_mail_li…Check if you run itEPSS 0.60%Apr 9, 2026
- Critical9.2OpenPLC_V3 is vulnerable to a Plaintext Storage of a Password vulnerability that could allow an attacker to retrieve credentials and access sensitive information.Check if you run itEPSS 0.30%Apr 9, 2026
- Medium6.1Wasmtime is a runtime for WebAssembly.Check if you run itEPSS 0.22%Apr 9, 2026
- Medium6.1Wasmtime is a runtime for WebAssembly.Check if you run itEPSS 0.21%Apr 9, 2026
- Low2.3Wasmtime is a runtime for WebAssembly.Check if you run itEPSS 0.29%Apr 9, 2026
- Critical9.0Wasmtime is a runtime for WebAssembly.Check if you run itEPSS 0.32%Apr 9, 2026
- Medium5.9Wasmtime is a runtime for WebAssembly.Check if you run itEPSS 0.36%Apr 9, 2026
- Low2.3Wasmtime is a runtime for WebAssembly.Check if you run itEPSS 0.32%Apr 9, 2026
- Medium5.6Wasmtime is a runtime for WebAssembly.Check if you run itEPSS 0.32%Apr 9, 2026
- Medium6.9Wasmtime is a runtime for WebAssembly.Check if you run itEPSS 0.38%Apr 9, 2026
- Critical9.2OpenPLC_V3 is vulnerable to an Initialization of a Resource with an Insecure Default vulnerability which could allow an attacker to gain access to the system by bypass…Check if you run itEPSS 0.45%Apr 9, 2026
- Medium6.5Rapid7 Velociraptor versions prior to 0.76.2 contain an improper input validation vulnerability in the client monitoring message handler on the Velociraptor server (pr…Check if you run itEPSS 0.46%Apr 9, 2026
- High7.2web3.py allows you to interact with the Ethereum blockchain using Python.Check if you run itEPSS 0.23%Apr 9, 2026
- High8.1BSV Ruby SDK is the Ruby SDK for the BSV blockchain.Check if you run itEPSS 0.14%Apr 9, 2026
- High7.5BSV Ruby SDK is the Ruby SDK for the BSV blockchain.Check if you run itEPSS 0.27%Apr 9, 2026
- High8.8AGiXT is a dynamic AI Agent Automation Platform.Check if you run itEPSS 1.32%Apr 9, 2026
Sort