Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Picomatch is a glob matcher written JavaScript.Check if you run itEPSS 0.42%Mar 26, 2026
- Medium5.4Kestra is an open-source, event-driven orchestration platform Versions up to and including 1.3.3 render user-supplied flow YAML metadata fields — description, inputs[]…Check if you run itEPSS 0.27%Mar 26, 2026
- High7.5Pay is an open-source payment SDK extension package for various Chinese payment services.Check if you run itEPSS 0.52%Mar 26, 2026
- Low2.3Active Storage allows users to attach cloud and local files in Rails applications.Check if you run itEPSS 0.45%Mar 26, 2026
- Medium5.4Ulloady is a file uploader script with multi-file upload support.Check if you run itEPSS 0.25%Mar 26, 2026
- High7.5A vulnerability in Grafana Tempo exposes the S3 SSE-C encryption key in plaintext through the /status/config endpoint, potentially allowing unauthorized users to obtai…Check if you run itEPSS 0.16%Mar 26, 2026
- Medium6.9Information disclosure in the file URI processing of File (Field) Paths in Drupal File (Field) Paths 7.x prior to 7.1.3 on Drupal 7.x allows authenticated users to dis…Check if you run itEPSS 0.41%Mar 26, 2026
- High8.1A flaw was found in Red Hat OpenShift AI (RHOAI) llama-stack-operator.Check if you run itEPSS 0.39%Mar 26, 2026
- High7.5Incorrect Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Resource Injection.This issue affects AI (Artificial Intelligence): from 0.0.0 befo…Check if you run itEPSS 0.24%Mar 26, 2026
- Medium5.4Invoice Ninja is a source-available invoice, quote, project and time-tracking app built with Laravel.Check if you run itEPSS 0.21%Mar 26, 2026
- High8.1Fireshare facilitates self-hosted media and link sharing.Check if you run itEPSS 0.44%Mar 26, 2026
- Low2.3Lychee is a free, open-source photo-management tool.Check if you run itEPSS 0.24%Mar 26, 2026
- Critical9.1Outline is a service that allows for collaborative documentation.Check if you run itEPSS 0.48%Mar 26, 2026
- Medium5.3Ech0 is an open-source, self-hosted publishing platform for personal idea sharing.Check if you run itEPSS 0.50%Mar 26, 2026
- Medium4.3iCalendar is a Ruby library for dealing with iCalendar files in the iCalendar format defined by RFC-5545.Check if you run itEPSS 0.25%Mar 26, 2026
- Medium5.4Invoice Ninja is a source-available invoice, quote, project and time-tracking app built with Laravel.Check if you run itEPSS 0.24%Mar 26, 2026
- High7.2PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser.Check if you run itEPSS 3.02%Mar 26, 2026
- Medium6.1PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser.Check if you run itEPSS 0.53%Mar 26, 2026
- Medium6.5PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser.Check if you run itEPSS 0.32%Mar 26, 2026
- Medium4.3PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser.Check if you run itEPSS 0.28%Mar 26, 2026
- Medium5.5PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser.Check if you run itEPSS 0.26%Mar 26, 2026
- Medium6.5MobSF is a mobile application security testing tool used.Check if you run itEPSS 0.29%Mar 26, 2026
- Medium6.5TSPortal is the WikiTide Foundation’s in-house platform used by the Trust and Safety team to manage reports, investigations, appeals, and transparency work.Check if you run itEPSS 0.30%Mar 26, 2026
- Medium5.3Lychee is a free, open-source photo-management tool.Check if you run itEPSS 0.27%Mar 26, 2026
- Medium6.5The Grafana MSSQL data source plugin contains a logic flaw that allows a low-privileged user (Viewer) to bypass API restrictions and trigger a catastrophic Out-Of-Memo…Check if you run itEPSS 0.45%Mar 26, 2026
Sort