Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8In OCaml before 4.14.3 and 5.x before 5.4.1, a buffer over-read in Marshal deserialization (runtime/intern.c) enables remote code execution through a multi-phase attack chain.Check if you run itEPSS 0.33%Feb 27, 2026
- Medium6.5hoppscotch is an open source API development ecosystem.Check if you run itEPSS 0.39%Feb 26, 2026
- Medium5.7Actual is a local-first personal finance tool.Check if you run itEPSS 0.37%Feb 26, 2026
- Critical9.3OpenViking through version 0.1.18, prior to commit 0251c70, contains a broken access control vulnerability that allows unauthenticated attackers to gain ROOT privilege…Check if you run itEPSS 0.45%Feb 26, 2026
- High8.7The Pelco, Inc.Check if you run itEPSS 0.34%Feb 26, 2026
- Low0.6Fleet is open source device management software.Check if you run itEPSS 0.13%Feb 26, 2026
- Medium4.9Live Helper Chat is an open-source application that enables live support websites.Check if you run itEPSS 0.35%Feb 26, 2026
- High7.1ImageMagick is free and open-source software used for editing and manipulating digital images.Check if you run itEPSS 0.21%Feb 26, 2026
- Critical9.4n8n is an open source workflow automation platform.Check if you run itEPSS 1.04%Feb 25, 2026
- Critical9.0n8n is an open source workflow automation platform.Check if you run itEPSS 1.38%Feb 25, 2026
- High7.2VMware Aria Operations contains a privilege escalation vulnerability.Check if you run itEPSS 0.73%Feb 25, 2026
- Critical9.0VMware Aria Operations contains a stored cross-site scripting vulnerability.Check if you run itEPSS 0.43%Feb 25, 2026
- High8.8OneUptime is a solution for monitoring and managing online services.Check if you run itEPSS 2.60%Feb 25, 2026
- Medium4.8An issue in OpenFUN Richie (LMS) in src/richie/apps/courses/api.py.Check if you run itEPSS 0.52%Feb 25, 2026
- High7.8A vulnerability in Cisco Catalyst SD-WAN Manager could allow an authenticated, local attacker with low privileges to gain root privileges on the underlying operating system.Check if you run itEPSS 0.31%Feb 25, 2026
- Medium6.7A vulnerability in the web-based management interface of Cisco FXOS Software and Cisco UCS Manager Software could allow an authenticated, local attacker with administr…Check if you run itEPSS 0.68%Feb 25, 2026
- Medium6.5A vulnerability in the CLI and web-based management interface of Cisco UCS Manager Software could allow an authenticated, remote attacker with valid administrative pri…Check if you run itEPSS 0.46%Feb 25, 2026
- High8.8LiveCode is an open-source, client-side code playground.Check if you run itEPSS 0.39%Feb 25, 2026
- High8.1Broadcom VMware Aria Operations Command Injection VulnerabilityPatch nowKEVEPSS 18.08%Feb 25, 2026
- High7.5Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor VulnerabilityPatch nowKEVEPSS 32.43%Feb 25, 2026
- High8.8The Advanced Woo Labels plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.37.Check if you run itEPSS 0.57%Feb 25, 2026
- Critical9.3Parse Dashboard is a standalone dashboard for managing Parse Server apps.Check if you run itEPSS 0.39%Feb 25, 2026
- Critical9.9Parse Dashboard is a standalone dashboard for managing Parse Server apps.Check if you run itEPSS 0.65%Feb 25, 2026
- Medium4.5OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.23%Feb 25, 2026
- High7.5NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system.Check if you run itEPSS 0.75%Feb 24, 2026