Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7Botan is a C++ cryptography library.Check if you run itEPSS 0.38%Apr 7, 2026
- Medium6.3LibreChat is a ChatGPT clone with additional features.Check if you run itEPSS 0.34%Apr 7, 2026
- High8.1Issue summary: An uncommon configuration of clients performing DANE TLSA-based server authentication, when paired with uncommon server DANE TLSA records, may result in…Check if you run itEPSS 0.67%Apr 7, 2026
- Medium5.3Cronicle is a multi-server task scheduler and runner, with a web based front-end UI.Check if you run itEPSS 0.24%Apr 7, 2026
- Medium6.8xdg-dbus-proxy is a filtering proxy for D-Bus connections.Check if you run itEPSS 0.16%Apr 7, 2026
- Critical9.3Open Access Management (OpenAM) is an access management solution.Check if you run itEPSS 8.43%Apr 7, 2026
- High8.1ChurchCRM is an open-source church management system.Check if you run itEPSS 0.40%Apr 7, 2026
- Critical9.8Cockpit's remote login feature passes user-supplied hostnames and usernames from the web interface to the SSH client without validation or sanitization.Patch nowKEVEPSS 9.22%Apr 7, 2026
- High7.1PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.46%Apr 7, 2026
- High7.3PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.43%Apr 7, 2026
- Medium6.1FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface.Check if you run itEPSS 0.17%Apr 7, 2026
- Critical9.8Koha Library before 23.05.10 fails to sanitize user-controllable filenames prior to unzipping, leading to remote code execution.Check if you run itEPSS 1.80%Apr 7, 2026
- High8.2A flaw was found in Open Cluster Management (OCM), the technology underlying Red Hat Advanced Cluster Management (ACM).Check if you run itEPSS 0.16%Apr 7, 2026
- High8.7A race condition in the Apache Kafka Java producer client’s buffer pool management can cause messages to be silently delivered to incorrect topics.Check if you run itEPSS 0.65%Apr 7, 2026
- High8.5Insufficient sanitization of dashboard dashlet title links in Checkmk 2.2.0 (EOL), Checkmk 2.3.0 before 2.3.0p46, Checkmk 2.4.0 before 2.4.0p25, and Checkmk 2.5.0 (bet…Check if you run itEPSS 0.30%Apr 7, 2026
- High7.6Improper Certificate Validation vulnerability in Erlang OTP public_key (pubkey_ocsp module) allows OCSP designated-responder authorization bypass via missing signature…Check if you run itEPSS 0.32%Apr 7, 2026
- Medium4.3Improper validation and restriction of a classpath path name vulnerability in Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ Web,…Check if you run itEPSS 0.68%Apr 7, 2026
- Medium5.5Buffer Overflow Vulnerability in JP1/IT Desktop Management 2 - Manager on Windows, JP1/IT Desktop Management 2 - Operations Director on Windows, Job Management Partner…Check if you run itEPSS 0.14%Apr 7, 2026
- Critical9.8Remote Code Execution Vulnerability in JP1/IT Desktop Management 2 - Manager on Windows, JP1/IT Desktop Management 2 - Operations Director on Windows, Job Management P…Check if you run itEPSS 0.61%Apr 7, 2026
- Medium5.3WWBN AVideo is an open source video platform.Check if you run itEPSS 0.39%Apr 6, 2026
- Medium5.3WWBN AVideo is an open source video platform.Check if you run itEPSS 0.34%Apr 6, 2026
- Critical9.3Directus is a real-time API and App dashboard for managing SQL database content.Check if you run itEPSS 0.19%Apr 6, 2026
- Medium6.1Open edX Platform enables the authoring and delivery of online learning at any scale.Check if you run itEPSS 0.26%Apr 6, 2026
- High8.7Bulwark Webmail is a self-hosted webmail client for Stalwart Mail Server.Check if you run itEPSS 0.19%Apr 6, 2026
- Medium5.3Bulwark Webmail is a self-hosted webmail client for Stalwart Mail Server.Check if you run itEPSS 0.23%Apr 6, 2026