Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5A flaw was found in GIMP's PSP (Paint Shop Pro) file parser.Check if you run itEPSS 0.51%Mar 26, 2026
- High8.4ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies.Check if you run itEPSS 0.10%Mar 26, 2026
- High8.7ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies.Check if you run itEPSS 0.10%Mar 26, 2026
- Medium4.7ImageMagick is free and open-source software used for editing and manipulating digital images.Check if you run itEPSS 0.13%Mar 26, 2026
- Medium4.3is a YAML parser and serialiser for JavaScript.Check if you run itEPSS 0.49%Mar 26, 2026
- Medium4.9InvenTree is an Open Source Inventory Management System.Check if you run itEPSS 0.30%Mar 26, 2026
- Medium6.5InvenTree is an Open Source Inventory Management System.Check if you run itEPSS 0.21%Mar 26, 2026
- Medium6.5GoDoxy is a reverse proxy and container orchestrator for self-hosters.Check if you run itEPSS 0.51%Mar 26, 2026
- High7.5The DataRow.Decode function fails to properly validate field lengths.Check if you run itEPSS 0.68%Mar 26, 2026
- High7.5The Delete function fails to properly validate offsets when processing malformed JSON input.Check if you run itEPSS 0.78%Mar 26, 2026
- High7.5The msgpack decoder fails to properly validate the input buffer length when processing truncated fixext data (format codes 0xd4-0xd8).Check if you run itEPSS 0.42%Mar 26, 2026
- High7.7Ruckus Unleashed contains a remote code execution vulnerability in the web-based management interface that allows authenticated remote attackers to execute arbitrary c…Check if you run itEPSS 0.53%Mar 26, 2026
- Medium6.9Ruckus Access Point products contain an arbitrary file read vulnerability in the command-line interface that allows authenticated remote attackers with administrative…Check if you run itEPSS 0.46%Mar 26, 2026
- Medium4.3A flaw was found in Keycloak.Check if you run itEPSS 0.33%Mar 26, 2026
- High7.2A flaw was found in Keycloak.Check if you run itEPSS 0.48%Mar 26, 2026
- High8.8Ory Polis, formerly known as BoxyHQ Jackson, bridges or proxies a SAML login flow to OAuth 2.0 or OpenID Connect.Check if you run itEPSS 0.47%Mar 26, 2026
- High7.8Zen C is a systems programming language that compiles to human-readable GNU C/C11.Check if you run itEPSS 0.24%Mar 26, 2026
- High7.5Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists.Check if you run itEPSS 0.52%Mar 26, 2026
- High8.1Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists.Check if you run itEPSS 0.31%Mar 26, 2026
- High7.7Daylight Studio FuelCMS v1.5.2 was discovered to contain a SQL injection vulnerability via the /controllers/Login.php component.Check if you run itEPSS 0.32%Mar 26, 2026
- Critical9.1An issue in Daylight Studio FuelCMS v1.5.2 allows attackers to exfiltrate users' password reset tokens via a mail splitting attack.Check if you run itEPSS 0.37%Mar 26, 2026
- High8.7thingino-firmware versions up to the firmware-2026-03-16 release contains an unauthenticated os command injection vulnerability in the WiFi captive portal CGI script t…Check if you run itEPSS 4.67%Mar 26, 2026
- High8.1ORY Oathkeeper is an Identity & Access Proxy (IAP) and Access Control Decision API that authorizes HTTP requests based on sets of Access Rules.Check if you run itEPSS 0.38%Mar 26, 2026
- Medium6.5ORY Oathkeeper is an Identity & Access Proxy (IAP) and Access Control Decision API that authorizes HTTP requests based on sets of Access Rules.Check if you run itEPSS 0.24%Mar 26, 2026
- Critical10.0ORY Oathkeeper is an Identity & Access Proxy (IAP) and Access Control Decision API that authorizes HTTP requests based on sets of Access Rules.Check if you run itEPSS 0.53%Mar 26, 2026
Sort