Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes.Check if you run itEPSS 0.49%May 9, 2026
- Medium5.3The LatePoint plugin for WordPress is vulnerable to Account Takeover via Weak Password Recovery Mechanism in the unauthenticated guest booking flow in versions up to,…Check if you run itEPSS 0.66%May 9, 2026
- Medium4.3PgBouncer before 1.25.2 did not perform an appropriate authorization check for the KILL_CLIENT admin command.Check if you run itEPSS 0.33%May 9, 2026
- Low3.8SysReptor is a fully customizable pentest reporting platform.Check if you run itEPSS 0.27%May 8, 2026
- Medium6.3Grimmory is a self-hosted digital library.Check if you run itEPSS 0.15%May 8, 2026
- High7.1New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system.Check if you run itEPSS 0.30%May 8, 2026
- Medium6.8SysReptor is a fully customizable pentest reporting platform.Check if you run itEPSS 0.31%May 8, 2026
- High8.4Emlog is an open source website building system.Check if you run itEPSS 0.21%May 8, 2026
- High8.8Avo is a framework to create admin panels for Ruby on Rails apps.Check if you run itEPSS 0.49%May 8, 2026
- Medium6.5nova-toggle-5 enables fliping booleans in the index.Check if you run itEPSS 0.34%May 8, 2026
- Medium5.4Plunk is an open-source email platform built on top of AWS SES.Check if you run itEPSS 0.24%May 8, 2026
- High8.7MailEnable Enterprise Premium 10.55 and earlier contains an improper authorization vulnerability in the WebAdmin mobile portal that allows attackers to bypass authenti…Check if you run itEPSS 0.61%May 8, 2026
- Medium5.5People is an application to handle users and teams, and distribute permissions across La Suite.Check if you run itEPSS 0.47%May 8, 2026
- Medium6.7Scoold is a Q&A and a knowledge sharing platform for teams.Check if you run itEPSS 0.43%May 8, 2026
- High8.6Insufficient input validation of the feature file name in adminbin call can cause arbitrary file read when a relative file path is passed.Check if you run itEPSS 0.34%May 8, 2026
- Critical9.8Nornicdb is a distributed low-latency, Graph+Vector, Temporal MVCC with all sub-ms HNSW search, graph traversal, and writes.Check if you run itEPSS 0.60%May 8, 2026
- Medium4.9Flarum is open-source forum software.Check if you run itEPSS 0.46%May 8, 2026
- High8.618next-http-middleware is a middleware to be used with Node.js web frameworks like express or Fastify and also for Deno.Check if you run itEPSS 0.47%May 8, 2026
- Critical10.0openvpn-auth-oauth2 is a plugin/management interface client for OpenVPN server to handle an OIDC based single sign-on (SSO) auth flows.Check if you run itEPSS 0.58%May 8, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set dev->online_queues is a count incremented in nvm…Check if you run itEPSS 0.17%May 8, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: btrfs: fix transaction abort when snapshotting received subvolumes Currently a user can trigger a t…Check if you run itEPSS 0.16%May 8, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: btrfs: fix transaction abort on file creation due to name hash collision If we attempt to create se…Check if you run itEPSS 0.16%May 8, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: btrfs: fix transaction abort on set received ioctl due to item overflow If the set received ioctl f…Check if you run itEPSS 0.16%May 8, 2026
- High7.1Brave CMS is an open-source CMS.Check if you run itEPSS 0.45%May 8, 2026
- High8.6Dolibarr is an enterprise resource planning (ERP) and customer relationship management (CRM) software package.Check if you run itEPSS 0.88%May 8, 2026