Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5A flaw was found in FreeIPA.Check if you run itEPSS 0.54%Aug 20, 2026
- Medium5.3Libsoup: libsoup: integer truncation in sort_ranges() comparator causes silent omission of http range responsesCheck if you run itEPSS 0.23%Aug 20, 2026
- High7.8libexpat before 2.8.4 lacks handler call depth tracking with custom encoding callbacks.Check if you run itEPSS 0.11%Aug 20, 2026
- High7.5In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy's return code leads to insufficient entropy, which results in being vulnerable to hash flooding attacks, cCheck if you run itEPSS 0.29%Aug 20, 2026
- Medium5.7Punk::OAuth2 versions before 0.03 for Perl allow an attacker-chosen off-site redirect after login because same_origin_path accepts a backslash or tab in the return parameter.Check if you run itEPSS 0.50%Aug 20, 2026
- UnknownSPIP SPIP Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 2.29%Aug 20, 2026
- UnknownVeronaLabs wp_statistics Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.65%Aug 20, 2026
- High7.0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privi…Check if you run itEPSS 0.20%Aug 19, 2026
- Medium5.3Koel is a free, open-source music streaming solution.Check if you run itEPSS 0.43%Aug 19, 2026
- High7.7Koel is a free, open-source music streaming solution.Check if you run itEPSS 0.41%Aug 19, 2026
- Medium4.3Koel is a free, open-source music streaming solution.Check if you run itEPSS 0.41%Aug 19, 2026
- High7.1Koel is a free, open-source music streaming solution.Check if you run itEPSS 0.38%Aug 19, 2026
- Medium6.5Wekan is open source kanban built with Meteor.Check if you run itEPSS 0.53%Aug 19, 2026
- High7.6Wekan is open source kanban built with Meteor.Check if you run itEPSS 0.35%Aug 19, 2026
- High8.7Wekan is open source kanban built with Meteor.Check if you run itEPSS 0.53%Aug 19, 2026
- High8.8Wekan is open source kanban built with Meteor.Check if you run itEPSS 0.51%Aug 19, 2026
- High7.7Wekan is open source kanban built with Meteor.Check if you run itEPSS 0.58%Aug 19, 2026
- Medium6.5Wekan is open source kanban built with Meteor.Check if you run itEPSS 0.40%Aug 19, 2026
- High8.5Wekan is open source kanban built with Meteor.Check if you run itEPSS 0.39%Aug 19, 2026
- Medium5.3pfSense Plus before 26.07 and pfSense CE through 2.8.1 contain a stored cross-site scripting vulnerability in the Traffic Graphs top-talkers feature, where PTR records…Check if you run itEPSS 1.17%Aug 19, 2026
- High8.7ICEcoder 8.1 contains an unauthenticated remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary OS commands by chaining an auth…Check if you run itEPSS 1.33%Aug 19, 2026
- Critical9.8IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper validation of network-supplied pointers.Check if you run itEPSS 0.80%Aug 19, 2026
- Critical9.8IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an integer overflow.Check if you run itEPSS 0.80%Aug 19, 2026
- Medium6.7IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to an out-of-bounds write.Check if you run itEPSS 0.17%Aug 19, 2026
- Critical9.8IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow.Check if you run itEPSS 0.80%Aug 19, 2026
Sort