Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.9Bitnami Sealed Secrets is vulnerable to a scope-widening attack during the secret rotation (/v1/rotate) flow.Check if you run itEPSS 0.41%Feb 26, 2026
- High7.5The WP Responsive Images plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.0 via the 'src' parameter.Patch nowKEVEPSS 1.87%Feb 26, 2026
- High8.2ZITADEL is an open source identity management platform.Check if you run itEPSS 0.22%Feb 26, 2026
- Low2.1ZITADEL is an open source identity management platform.Check if you run itEPSS 0.26%Feb 26, 2026
- Medium5.3NetExec is a network execution tool.Check if you run itEPSS 0.38%Feb 26, 2026
- Medium4.3ZITADEL is an open source identity management platform.Check if you run itEPSS 0.16%Feb 26, 2026
- Critical9.8Dottie provides nested object access and manipulation in JavaScript.Check if you run itEPSS 0.36%Feb 26, 2026
- High7.5rldns is an open source DNS server.Check if you run itEPSS 0.49%Feb 26, 2026
- High8.9c3p0, a JDBC Connection pooling library, is vulnerable to attack via maliciously crafted Java-serialized objects and instances.Check if you run itEPSS 0.60%Feb 26, 2026
- High7.2Astro is a web framework.Check if you run itEPSS 0.32%Feb 26, 2026
- High7.1Zed, a code editor, has a symlink escape vulnerability in versions prior to 0.225.9 in Agent file tools ( , ).Check if you run itEPSS 0.33%Feb 26, 2026
- High8.7TerriaJS-Server is a NodeJS Express server for TerriaJS, a library for building web-based geospatial data explorers.Check if you run itEPSS 0.28%Feb 26, 2026
- High8.0Sub2API is an AI API gateway platform designed to distribute and manage API quotas from AI product subscriptions.Check if you run itEPSS 0.28%Feb 26, 2026
- Medium6.8psd-tools is a Python package for working with Adobe Photoshop PSD files.Check if you run itEPSS 0.48%Feb 26, 2026
- High8.6Mailpit is an email testing tool and API for developers.Check if you run itEPSS 0.53%Feb 26, 2026
- High7.4Zed, a code editor, has a Zip Slip (Path Traversal) vulnerability exists in its extension archive extraction functionality prior to version 0.224.4.Check if you run itEPSS 0.41%Feb 26, 2026
- Medium4.4ImageMagick is free and open-source software used for editing and manipulating digital images.Check if you run itEPSS 0.14%Feb 26, 2026
- High7.1ImageMagick is free and open-source software used for editing and manipulating digital images.Check if you run itEPSS 0.16%Feb 26, 2026
- Medium6.4Model Context Protocol Servers is a collection of reference implementations for the model context protocol (MCP).Check if you run itEPSS 0.34%Feb 26, 2026
- High8.8Manyfold is an open source, self-hosted web application for managing a collection of 3d models, particularly focused on 3d printing.Check if you run itEPSS 0.42%Feb 26, 2026
- High8.7TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32.Check if you run itEPSS 0.51%Feb 26, 2026
- Medium5.1Fleet is open source device management software.Check if you run itEPSS 0.35%Feb 26, 2026
- Critical10.0TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32.Check if you run itEPSS 0.87%Feb 25, 2026
- High8.5n8n is an open source workflow automation platform.Check if you run itEPSS 0.22%Feb 25, 2026
- Critical9.0n8n is an open source workflow automation platform.Check if you run itEPSS 0.82%Feb 25, 2026
Sort