Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).Check if you run itEPSS 0.26%Apr 21, 2026
- Low3.7Vulnerability in Oracle Java SE (component: Libraries).Check if you run itEPSS 0.21%Apr 21, 2026
- Low2.9Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).Check if you run itEPSS 0.12%Apr 21, 2026
- Medium6.0Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).Check if you run itEPSS 0.10%Apr 21, 2026
- High7.0mailcow: dockerized is an open source groupware/email suite based on docker.Check if you run itEPSS 0.29%Apr 21, 2026
- High7.1FreeScout is a free self-hosted help desk and shared mailbox.Check if you run itEPSS 0.43%Apr 21, 2026
- High8.8Let's Encrypt client and ACME library written in Go (Lego).Check if you run itEPSS 0.55%Apr 21, 2026
- Medium4.8mitmproxy is a interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers and mitmweb is a web-based interface for mitmproxy.Check if you run itEPSS 0.26%Apr 21, 2026
- Medium5.6The Home Assistant Command-line interface (hass-cli) is a command-line tool for Home Assistant.Check if you run itEPSS 0.14%Apr 21, 2026
- Medium4.1FreeScout is a free self-hosted help desk and shared mailbox.Check if you run itEPSS 0.40%Apr 21, 2026
- Medium5.7Twenty is an open source CRM.Check if you run itEPSS 0.42%Apr 21, 2026
- High8.7This vulnerability exists in Quantum Networks router due to inadequate sanitization of user-supplied input in the management CLI interface.Check if you run itEPSS 0.81%Apr 21, 2026
- Medium6.1The Website LLMs.txt plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab' parameter in all versions up to, and including, 8.2.6.Check if you run itEPSS 0.29%Apr 21, 2026
- Medium6.9OpenClaw before 2026.3.31 contains a trust-decline vulnerability that preserves attacker-discovered endpoints in remote onboarding flows.Check if you run itEPSS 0.45%Apr 21, 2026
- High7.1OpenClaw before 2026.3.28 contains an authorization bypass vulnerability in the chat.send gateway method where ACP-only provenance fields are gated by self-declared cl…Check if you run itEPSS 0.35%Apr 21, 2026
- Medium5.9OpenClaw before 2026.4.2 accepts non-loopback cleartext ws:// gateway endpoints and transmits stored gateway credentials over unencrypted connections.Check if you run itEPSS 0.18%Apr 21, 2026
- High7.3Glances is an open-source system cross-platform monitoring tool.Check if you run itEPSS 0.47%Apr 21, 2026
- Medium5.1GFI HelpDesk before 4.99.10 contains a stored cross-site scripting vulnerability in the Reports module where the title parameter is passed directly to SWIFT_Report::Cr…Check if you run itEPSS 0.14%Apr 20, 2026
- Medium5.1GFI HelpDesk before 4.99.9 contains a stored cross-site scripting vulnerability in the Troubleshooter module where the subject POST parameter is not sanitized in Contr…Check if you run itEPSS 0.14%Apr 20, 2026
- High7.1ConnectWise has released a security update for ConnectWise Automate™ that addresses a behavior in the ConnectWise Automate Solution Center where certain client-to-serv…Check if you run itEPSS 0.13%Apr 20, 2026
- Medium5.7An improper access control vulnerability in the canonical-livepatch snap client prior to version 10.15.0 allows a local unprivileged user to obtain a sensitive, root-l…Check if you run itEPSS 0.17%Apr 20, 2026
- Medium5.3Information exposure vulnerability has been identified in Apache Kafka.Check if you run itEPSS 0.89%Apr 20, 2026
- High7.4A vulnerability was identified in Tenda F451 1.0.0.7_cn_svn7958.Check if you run itEPSS 0.79%Apr 20, 2026
- High8.5SKYSEA Client View and SKYMEC IT Manager provided by Sky Co.,LTD.Check if you run itEPSS 0.15%Apr 20, 2026
- Critical9.4A command injection vulnerability was found in the PPTP VPN Clients on the ADM.Check if you run itEPSS 2.08%Apr 20, 2026