Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical10.0CtrlPanel is open-source billing software for hosting providers.Patch nowKEVEPSS 3.24%May 19, 2026
- UnknownSonicWall SonicOS Authentication Bypass by Primary WeaknessPatch nowKEVEPSS 0.49%May 19, 2026
- UnknownWindows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityPatch nowKEVEPSS 23.84%May 19, 2026
- High7.1AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents.Check if you run itEPSS 0.38%May 18, 2026
- Low3.9FacturaScripts is an open source accounting and invoicing software.Check if you run itEPSS 0.10%May 18, 2026
- Medium6.5FacturaScripts is an open source accounting and invoicing software.Check if you run itEPSS 0.23%May 18, 2026
- High7.2FacturaScripts is an open source accounting and invoicing software.Check if you run itEPSS 0.52%May 18, 2026
- Medium6.5BigBlueButton is an open-source virtual classroom.Check if you run itEPSS 0.26%May 18, 2026
- High8.6SOGo versions 5.12.7 and prior contains a SQL injection vulnerability in the Access Control List management functionality that allows authenticated users to extract ar…Check if you run itEPSS 0.32%May 18, 2026
- Critical9.3Unsafe use of Python's eval() on server-received data in the vector_in() function in amazon-redshift-python-driver before 2.1.14 allows a rogue server or man-in-the-mi…Check if you run itEPSS 0.81%May 18, 2026
- High7.8In mlflow/mlflow versions prior to 3.11.0, the function in creates temporary directories with world-writable permissions (0o777), and the function in creates directori…Check if you run itEPSS 0.19%May 18, 2026
- Critical9.9Dokploy is a free, self-hostable Platform as a Service (PaaS).Check if you run itEPSS 1.22%May 18, 2026
- High8.6FreePBX is an open source IP PBX.Check if you run itEPSS 0.90%May 18, 2026
- Critical9.8WebdriverIO is a test automation framework for unit, e2e and component testing using WebDriver, WebDriver BiDi and Appium.Check if you run itEPSS 3.31%May 18, 2026
- High7.3Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks.Check if you run itEPSS 0.21%May 18, 2026
- High7.3Claude HUD through 0.0.12, patched in commit 234d9aa, contains a command injection vulnerability that allows local attackers to execute arbitrary commands by manipulat…Check if you run itEPSS 0.51%May 18, 2026
- Medium4.8Claude HUD through 0.0.12, patched in commit 234d9aa, contains a path traversal vulnerability that allows attackers to read arbitrary files by supplying an unvalidated…Check if you run itEPSS 0.13%May 18, 2026
- Low2.4Claude HUD through 0.0.12, patched in commit 234d9aa, constructs OSC 8 terminal hyperlink escape sequences using raw cwd and branchUrl values without stripping control…Check if you run itEPSS 0.10%May 18, 2026
- Medium6.8Summarize prior to 0.15.1 contains an insecure file permission vulnerability in the refresh-free configuration rewrite path that allows local users to read sensitive c…Check if you run itEPSS 0.14%May 18, 2026
- Medium4.6Summarize prior to 0.15.1 contains a vulnerability in the hover summary feature that allows malicious pages to dispatch synthetic mouseover events over attacker-contro…Check if you run itEPSS 0.33%May 18, 2026
- Low2.1Summarize prior to 0.15.1 contains a missing authorization vulnerability that allows attackers to execute browser automation actions without per-call user approval whe…Check if you run itEPSS 0.23%May 18, 2026
- Medium4.6HCL Connections contains a broken access control vulnerability that may allow unauthorized user to update data in certain scenarios.Check if you run itEPSS 0.12%May 18, 2026
- Medium6.1SimpleSAMLphp-casserver is a CAS 1.0 and 2.0 compliant CAS server in the form of a SimpleSAMLphp module.Check if you run itEPSS 0.27%May 18, 2026
- High8.9A vulnerability was found in lwIP up to 2.2.1.Check if you run itEPSS 1.10%May 18, 2026
- Medium5.3Summarize prior to 0.15.1 contains a missing authorization vulnerability in the content script window.postMessage bridge that allows malicious pages to perform unautho…Check if you run itEPSS 0.19%May 18, 2026
Sort