Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3GoJobs is a REST API for a Job Board platform.Check if you run itEPSS 0.29%May 12, 2026
- Medium6.1Kyverno is a policy engine designed for cloud native platform engineering teams.Check if you run itEPSS 0.18%May 12, 2026
- High7.2A Remote Code Execution vulnerability in Claris FileMaker Cloud allowed a user with Admin Console privileges to inject arbitrary operating system commands through unsa…Check if you run itEPSS 0.46%May 12, 2026
- High7.2A Remote Code Execution vulnerability in Claris FileMaker Cloud allowed a user with Admin Console privileges to bypass a front-end restriction on OS Script schedule ty…Check if you run itEPSS 0.46%May 12, 2026
- High8.8ChurchCRM is an open-source church management system.Check if you run itEPSS 0.15%May 12, 2026
- Critical10.0ChurchCRM is an open-source church management system.Check if you run itEPSS 0.71%May 12, 2026
- Low2.3Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investigation, transparency, and verification.Check if you run itEPSS 0.21%May 12, 2026
- Medium5.1Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investigation, transparency, and verification.Check if you run itEPSS 0.34%May 12, 2026
- High7.1Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investigation, transparency, and verification.Check if you run itEPSS 0.35%May 12, 2026
- Critical9.0Thymeleaf is a server-side Java template engine for web and standalone environments.Check if you run itEPSS 0.43%May 12, 2026
- High7.5The Court Reservation – Manage Your Court Bookings Online plugin for WordPress is vulnerable to generic SQL Injection via the ‘id’ parameter in all versions up to, and…Check if you run itEPSS 0.27%May 12, 2026
- Medium6.5The The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 0.9.2.3.Check if you run itEPSS 0.38%May 12, 2026
- High8.7Heym before 0.0.21 contains a sandbox escape vulnerability in the custom Python tool executor that allows authenticated workflow authors to bypass sandbox restrictions…Check if you run itEPSS 0.29%May 12, 2026
- High7.6Heym before 0.0.21 contains an authorization bypass vulnerability in workflow execution that allows authenticated users to execute arbitrary workflows by referencing v…Check if you run itEPSS 0.29%May 12, 2026
- High7.2Heym before 0.0.21 contains a path traversal vulnerability in the file upload endpoint that allows authenticated users to write attacker-controlled files to arbitrary…Check if you run itEPSS 0.36%May 12, 2026
- High8.8Command injection vulnerabilities exist in the command line interface (CLI) service accessed by the PAPI protocol of AOS-8 and AOS-10 Operating Systems.Check if you run itEPSS 1.23%May 12, 2026
- High8.7Mako is a template library written in Python.Check if you run itEPSS 0.74%May 12, 2026
- Medium5.3Statamic is a Laravel and Git powered content management system (CMS).Check if you run itEPSS 0.21%May 12, 2026
- Medium6.8Lemur manages TLS certificate creation.Check if you run itEPSS 0.14%May 12, 2026
- High8.1Lemur manages TLS certificate creation.Check if you run itEPSS 0.22%May 12, 2026
- High7.5Snappier is a high performance C# implementation of the Snappy compression algorithm.Check if you run itEPSS 0.32%May 12, 2026
- Medium6.2Hugo is a static site generator.Check if you run itEPSS 0.27%May 12, 2026
- High7.5Deskflow is a keyboard and mouse sharing app.Check if you run itEPSS 0.28%May 12, 2026
- Critical9.4Scramble generates API documentation for Laravel project.Check if you run itEPSS 5.86%May 12, 2026
- High8.1efw4.X is an Enterprise Framework for Web.Check if you run itEPSS 0.35%May 12, 2026
Sort