Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2unearth through 0.18.2, fixed in commit 6c78164, contains a path traversal vulnerability in the is_within_directory function that fails to normalize paths before valid…Check if you run itEPSS 0.59%Aug 10, 2026
- High7.3Kitty is a cross-platform GPU based terminal.Check if you run itEPSS 0.21%Aug 10, 2026
- Medium4.3CyberChef is a web app for encryption, encoding, compression, and data analysis.Check if you run itEPSS 0.32%Aug 10, 2026
- Critical9.9ERPNext is a free and open source Enterprise Resource Planning tool.Check if you run itEPSS 0.72%Aug 10, 2026
- High7.1ERPNext is a free and open source Enterprise Resource Planning tool.Check if you run itEPSS 0.50%Aug 10, 2026
- High7.1ERPNext is a free and open source Enterprise Resource Planning tool.Check if you run itEPSS 0.47%Aug 10, 2026
- Medium6.5ERPNext is a free and open source Enterprise Resource Planning tool.Check if you run itEPSS 0.51%Aug 10, 2026
- Medium6.5ERPNext is a free and open source Enterprise Resource Planning tool.Check if you run itEPSS 0.44%Aug 10, 2026
- Medium4.3ERPNext is a free and open source Enterprise Resource Planning tool.Check if you run itEPSS 0.35%Aug 10, 2026
- High8.1Tabby (formerly Terminus) is a highly configurable terminal emulator.Check if you run itEPSS 0.49%Aug 10, 2026
- Medium5.1SQLBot through 1.10.0, fixed in commit c3f40a5, contains a stored cross-site scripting vulnerability in the SQText dashboard component that renders TinyMCE output via…Check if you run itEPSS 0.30%Aug 10, 2026
- Critical9.3react-tracked provides state usage tracking with Proxies.Check if you run itEPSS 0.67%Aug 10, 2026
- High8.8A flaw was found in odh-dashboard.Check if you run itEPSS 0.66%Aug 10, 2026
- High7.5The UpdateHub firmware-update agent's probe handler (z_impl_updatehub_probe() in subsys/mgmt/updatehub/updatehub.c) parses the JSON metadata returned by the update ser…Check if you run itEPSS 0.47%Aug 10, 2026
- Low3.7The UpdateHub OTA client in subsys/mgmt/updatehub/updatehub.c contains an out-of-bounds / uninitialized-memory read in z_impl_updatehub_probe().Check if you run itEPSS 0.35%Aug 10, 2026
- High8.7CyberPanel 2.4.3, fixed in commit eca0c3c, contains an authenticated command injection vulnerability in the remote backup transfer feature that allows authenticated at…Check if you run itEPSS 3.28%Aug 10, 2026
- High8.7CyberPanel 2.4.3, fixed in commit eca0c3c, contains an authenticated remote code execution vulnerability in the remote backup feature that allows authenticated attacke…Check if you run itEPSS 0.47%Aug 10, 2026
- High8.7Cachet through 2.4.1 contains a server-side template injection vulnerability in incident template rendering that allows authenticated users to execute arbitrary PHP code.Check if you run itEPSS 0.80%Aug 10, 2026
- Medium5.3FlyEnv before 4.18.0 fails to sanitize HTML from markdown rendering and AI chat content passed to Vue v-html directives.Check if you run itEPSS 0.34%Aug 10, 2026
- Medium6.9Hugging Face Accelerate through 1.14.0 contains a path traversal vulnerability in load_checkpoint_in_model and load_checkpoint_and_dispatch functions that fail to sani…Check if you run itEPSS 0.19%Aug 10, 2026
- High8.4OP-TEE OS through 4.10.0, fixed in commit 7b8b494, contains a buffer underwrite vulnerability in the RSA NOPAD encrypt and decrypt operations within the mbedTLS softwa…Check if you run itEPSS 0.18%Aug 10, 2026
- High8.4OP-TEE OS through 4.10.0, fixed in commit 8794043, contains a use-after-free vulnerability in the Trusted Application loader that allows attackers with the ability to…Check if you run itEPSS 0.14%Aug 10, 2026
- Medium5.7OP-TEE OS through 4.10.0, fixed in commit 0aadfc2, contains a null pointer dereference vulnerability in the Widevine pseudo-TA open_session handler that allows Normal…Check if you run itEPSS 0.17%Aug 10, 2026
- High7.1CyberPanel 2.4.3, fixed in commit eca0c3c, contains an arbitrary file read vulnerability in the file manager component that allows authenticated attackers to read sens…Check if you run itEPSS 0.46%Aug 10, 2026
- High8.7Flowise versions 2.2.4 through 3.1.4 contain a missing authorization vulnerability in the POST /api/v1/openai-assistants-file/download endpoint that allows unauthentic…Check if you run itEPSS 0.68%Aug 10, 2026
Sort