Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical10.0ORY Oathkeeper is an Identity & Access Proxy (IAP) and Access Control Decision API that authorizes HTTP requests based on sets of Access Rules.Check if you run itEPSS 0.53%Mar 26, 2026
- Medium5.3H3 is a minimal H(TTP) framework.Check if you run itEPSS 0.25%Mar 26, 2026
- High7.5goxmlsig provides XML Digital Signatures implemented in Go.Check if you run itEPSS 0.32%Mar 26, 2026
- Medium6.5Roadiz is a polymorphic content management system based on a node system that can handle many types of services.Check if you run itEPSS 0.40%Mar 26, 2026
- Medium5.3Syft is a a CLI tool and Go library for generating a Software Bill of Materials (SBOM) from container images and filesystems.Check if you run itEPSS 0.42%Mar 26, 2026
- High7.8Firecrawl version 2.8.0 and prior contain a server-side request forgery (SSRF) protection bypass vulnerability in the Playwright scraping service where network policy…Check if you run itEPSS 0.42%Mar 26, 2026
- Medium4.9Mattermost Plugins versions <=11.4 11.0.4 11.1.3 11.3.2 10.11.11.0 fail to validate incoming request size which allows an authenticated attacker to cause service disru…Check if you run itEPSS 0.36%Mar 26, 2026
- Medium4.3Mattermost versions 11.2.x <= 11.2.2, 10.11.x <= 10.11.10, 11.4.x <= 11.4.0, 11.3.x <= 11.3.1 fail to apply view restrictions when retrieving group member IDs, which a…Check if you run itEPSS 0.24%Mar 26, 2026
- Medium6.5Mattermost versions 11.4.x <= 11.4.0, 11.3.x <= 11.3.1, 11.2.x <= 11.2.3, 10.11.x <= 10.11.11 fail to validate decompressed archive entry sizes during file extraction…Check if you run itEPSS 0.36%Mar 26, 2026
- Medium5.5Mattermost versions 11.4.x <= 11.4.0, 11.3.x <= 11.3.1, 11.2.x <= 11.2.3, 10.11.x <= 10.11.11 fail to set permissions on downloaded bulk export which allows other loca…Check if you run itEPSS 0.13%Mar 26, 2026
- Medium4.9Mattermost versions 11.4.x <= 11.4.0, 11.3.x <= 11.3.1, 11.2.x <= 11.2.3, 10.11.x <= 10.11.11 fail to validate Advanced Logging file target paths which allows system a…Check if you run itEPSS 0.44%Mar 26, 2026
- Low2.2Mattermost Plugins versions <=11.4 10.11.11.0 fail to validate webhook request timestamps which allows an attacker to corrupt Zoom meeting state in Mattermost via repl…Check if you run itEPSS 0.30%Mar 26, 2026
- High8.8Mattermost versions 11.2.x <= 11.2.2, 10.11.x <= 10.11.10, 11.4.x <= 11.4.0, 11.3.x <= 11.3.1 fail to sanitize user-controlled post content in the mmctl commands termi…Check if you run itEPSS 0.28%Mar 26, 2026
- Medium6.1Stirling-PDF is a locally hosted web application that allows you to perform various operations on PDF files.Check if you run itEPSS 0.27%Mar 26, 2026
- High7.6LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files.Check if you run itEPSS 0.75%Mar 26, 2026
- Medium4.3Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras.Check if you run itEPSS 0.32%Mar 26, 2026
- Medium6.5Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras.Check if you run itEPSS 0.26%Mar 26, 2026
- High8.1Kysely is a type-safe TypeScript SQL query builder.Check if you run itEPSS 0.43%Mar 26, 2026
- High7.5LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files.Check if you run itEPSS 1.07%Mar 26, 2026
- Low1.3Sakai is a Collaboration and Learning Environment (CLE).Check if you run itEPSS 0.20%Mar 26, 2026
- Medium5.2EVerest is an EV charging software stack.Check if you run itEPSS 0.22%Mar 26, 2026
- Medium5.2EVerest is an EV charging software stack.Check if you run itEPSS 0.22%Mar 26, 2026
- Medium6.5EVerest is an EV charging software stack.Check if you run itEPSS 0.25%Mar 26, 2026
- High8.7OpenClaw before 2026.3.28 contains a path traversal vulnerability in media parsing that allows attackers to read arbitrary files by bypassing path validation in the is…Check if you run itEPSS 0.70%Mar 26, 2026
- Medium6.5Kirby CMS through 5.1.4 allows an authenticated user with 'Editor' permissions to cause a persistent Denial of Service (DoS) via a malformed image upload.Check if you run itEPSS 0.46%Mar 26, 2026
Sort