Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1libheif is a HEIF and AVIF file format decoder and encoder.Check if you run itEPSS 0.34%May 19, 2026
- Medium5.5Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks.Check if you run itEPSS 0.16%May 19, 2026
- Medium5.3In the AWS Secrets Manager and SSM Parameter Store secrets backends of prior to 9.28.0, the team-scoping logic could resolve a containing a (e.g.Check if you run itEPSS 0.41%May 19, 2026
- High8.8libheif is a HEIF and AVIF file format decoder and encoder.Check if you run itEPSS 0.68%May 19, 2026
- Medium6.5libheif is a HEIF and AVIF file format decoder and encoder.Check if you run itEPSS 0.32%May 19, 2026
- High8.7JWT tokens that were used by workers in Kubernetes Executors have been exposed to users who had read only access to Kuberentes Pods.Check if you run itEPSS 0.16%May 19, 2026
- High8.5Execution with unnecessary privileges vulnerability in Broadcom Automic Automation Agent Unix on Linux x64, Linux Power 64 BE, Linux Power 64 LE, zLinux (zSeries), AIX…Check if you run itEPSS 0.15%May 19, 2026
- Medium6.5The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.0.6.Check if you run itEPSS 0.40%May 19, 2026
- High7.5The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation…Check if you run itEPSS 0.56%May 19, 2026
- High8.2LIVE555 before 2026.04.22 contains an authorization bypass vulnerability in RTSP session command handling that allows attackers to replay valid Session tokens from una…Check if you run itEPSS 0.48%May 19, 2026
- Low2.1Discourse is an open-source discussion platform.Check if you run itEPSS 0.21%May 19, 2026
- Medium6.8EspoCRM is an open source customer relationship management application.Check if you run itEPSS 0.21%May 19, 2026
- Critical9.8Kitty is a cross-platform GPU based terminal.Check if you run itEPSS 0.29%May 19, 2026
- Medium6.5Faraday is an HTTP client library abstraction layer that provides a common interface over many adapters.Check if you run itEPSS 0.27%May 19, 2026
- Medium6.5libheif is a HEIF and AVIF file format decoder and encoder.Check if you run itEPSS 0.30%May 19, 2026
- Medium5.1In ScadaBR version 1.2.0, a Use of Hard-Coded Credentials vulnerability could allow an attacker to access the SCADA system as admin.Check if you run itEPSS 0.39%May 19, 2026
- High8.6In ScadaBR version 1.2.0, a CSRF vulnerability could allow an attacker to trigger any authenticated action through a victim's session by luring any logged-in user to a…Check if you run itEPSS 0.18%May 19, 2026
- High8.7In ScadaBR version 1.2.0, an OS Command Injection vulnerability could allow an attacker to execute commands as root on the SCADA system.Check if you run itEPSS 1.32%May 19, 2026
- High8.8In ScadaBR version 1.2.0, a Missing Authentication for Critical Function vulnerability could allow an unauthenticated attacker to send a HTTP GET requests to the SCADA…Check if you run itEPSS 0.45%May 19, 2026
- High8.7Java Deserialisation Vulnerability in Jaspersoft Reports Library leads to Remote Code Execution (RCE), potentially allowing code execution on the affected systemCheck if you run itEPSS 0.52%May 19, 2026
- High8.6Windmill prior to 1.703.2 contains an incorrect default permissions vulnerability in nsjail sandbox configuration files where /etc is bind-mounted without read-write r…Check if you run itEPSS 0.28%May 19, 2026
- High8.8Kitty is a cross-platform GPU based terminal.Check if you run itEPSS 0.38%May 19, 2026
- Medium5.9NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform.Check if you run itEPSS 0.40%May 19, 2026
- Medium4.6In the web management interface of Archer AX72 (SG) v1, the network diagnostic feature improperly handles invalid user input, resulting in limited exposure of diagnost…Check if you run itEPSS 0.22%May 19, 2026
- Critical9.2Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via external URL resolution in uploaded IaC templates when running in server mode.Check if you run itEPSS 0.48%May 19, 2026
Sort