Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.8A flaw was found in libsoup.Check if you run itEPSS 0.87%May 29, 2026
- Medium4.3AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.Check if you run itEPSS 0.30%May 28, 2026
- Medium4.7typescript-utcp is a typescript implementation of UTCP.Check if you run itEPSS 0.20%May 28, 2026
- High7.3Better Auth is an authentication and authorization library for TypeScript.Check if you run itEPSS 0.50%May 28, 2026
- High8.1Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments.Check if you run itEPSS 0.48%May 28, 2026
- Medium6.5Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130).Check if you run itEPSS 0.47%May 28, 2026
- High7.7Server-Side Request Forgery (CWE-918) in Kibana can allow an authenticated user with connector management privileges to bypass the operator-configured connector allowl…Check if you run itEPSS 0.32%May 28, 2026
- Medium6.5Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130).Check if you run itEPSS 0.47%May 28, 2026
- High7.7Server-Side Request Forgery (CWE-918) in Kibana allows authenticated users with connector management privileges to bypass the operator-configured connection allowlist.Check if you run itEPSS 0.41%May 28, 2026
- Medium6.9Music Player Daemon (MPD) before version 0.24.11 contains a server-side request forgery vulnerability in CurlInputPlugin where CURLOPT_FOLLOWLOCATION is set without CU…Check if you run itEPSS 0.48%May 28, 2026
- Medium5.4Improper Neutralization of Input During Web Page Generation (CWE-79) in Kibana can lead to stored HTML injection.Check if you run itEPSS 0.14%May 28, 2026
- High7.3A path traversal vulnerability was identified in Kibana's dashboard management functionality.Check if you run itEPSS 0.24%May 28, 2026
- High8.7DeepCode through commit c991dc2 contains a path traversal vulnerability in the SPA catch-all route in new_ui/backend/main.py that allows unauthenticated attackers to r…Check if you run itEPSS 0.42%May 28, 2026
- Medium6.0RustFS is a distributed object storage system built in Rust.Check if you run itEPSS 0.15%May 28, 2026
- Medium5.0Local Deep Research is an AI-powered research assistant for deep, iterative research.Check if you run itEPSS 0.41%May 28, 2026
- High7.5Automad is a flat-file content management system and template engine.Check if you run itEPSS 1.43%May 28, 2026
- High8.8RustFS is a distributed object storage system built in Rust.Check if you run itEPSS 0.54%May 28, 2026
- Critical9.8RustFS is a distributed object storage system built in Rust.Check if you run itEPSS 0.48%May 28, 2026
- Medium5.0Local Deep Research is an AI-powered research assistant for deep, iterative research.Check if you run itEPSS 0.36%May 28, 2026
- High8.8An issue was discovered in OpenStack Keystone before 29.0.2.Check if you run itEPSS 0.43%May 28, 2026
- High8.8An issue was discovered in OpenStack Keystone before 29.0.2.Check if you run itEPSS 0.42%May 28, 2026
- High8.8An issue was discovered in OpenStack Keystone before 29.0.2.Check if you run itEPSS 0.40%May 28, 2026
- Medium5.0pyLoad is a free and open-source download manager written in Python.Check if you run itEPSS 0.29%May 28, 2026
- Medium6.1Speakr is a personal, self-hosted web application designed for transcribing audio recordings.Check if you run itEPSS 0.26%May 28, 2026
- High7.7OpenReplay is a self-hosted session replay suite.Check if you run itEPSS 0.37%May 28, 2026