Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high lev…Check if you run itEPSS 0.18%May 15, 2026
- Critical9.3Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high lev…Check if you run itEPSS 0.37%May 15, 2026
- Critical9.1OpenMRS is an open source electronic medical record system platform.Check if you run itEPSS 0.32%May 15, 2026
- Medium6.9Traefik is an HTTP reverse proxy and load balancer.Check if you run itEPSS 0.45%May 15, 2026
- Medium5.1Cockpit CMS through version 2.14.0, patched in commit 72a83fc, contains a stored cross-site scripting vulnerability in the Set field type's Display template option, wh…Check if you run itEPSS 0.14%May 15, 2026
- High8.4Turborepo is a high-performance build system for JavaScript and TypeScript codebases.Check if you run itEPSS 0.16%May 15, 2026
- Low3.5is GitHub’s official command line tool.Check if you run itEPSS 0.21%May 15, 2026
- Medium5.1Turborepo is a high-performance build system for JavaScript and TypeScript codebases.Check if you run itEPSS 0.12%May 15, 2026
- None0.0Turborepo is a high-performance build system for JavaScript and TypeScript codebases.Check if you run itEPSS 0.39%May 15, 2026
- High8.1Code injection in SQL code generation in Apache Flink 1.15.0 through 1.20.x and 2.0.0 through 2.x allows authenticated users with query submission privileges to execut…Check if you run itEPSS 0.38%May 15, 2026
- Critical10.0An Improper Access Control vulnerability in several internal API endpoints for Google Cloud Application Integration prior to 2026-01-23 allows a remote, unauthenticate…Check if you run itEPSS 0.53%May 15, 2026
- Medium6.5Imager versions through 1.030 for Perl allow a heap out of bounds (OOB) write on crafted multi-frame GIF files.Check if you run itEPSS 0.32%May 15, 2026
- High7.0Vim is an open source, command line text editor.Check if you run itEPSS 0.55%May 15, 2026
- High7.5ws is an open source WebSocket client and server for Node.js.Check if you run itEPSS 0.74%May 15, 2026
- High7.3Oinone Pamirs 7.0.0 contains a command injection vulnerability in CommandHelper.executeCommands.Check if you run itEPSS 1.41%May 15, 2026
- Medium6.5Oinone Pamirs 7.0.0 contains an XML External Entity (XXE) issue in its XStream-based XML parsing logic.Check if you run itEPSS 0.36%May 15, 2026
- Medium6.5Oinone Pamirs 7.0.0 contains a code execution vulnerability via ScriptRunner.Check if you run itEPSS 0.32%May 15, 2026
- High7.5An issue in Nodemailer smtp_server before v.3.18.3 allows a remote attacker to cause a denial of service via the SMTPStream._write, lib/smtp-stream.js componentsCheck if you run itEPSS 0.57%May 15, 2026
- High8.2A buffer underflow vulnerability has been identified in the ogg123 utility from the vorbis-tools 1.4.3 package in function remotethread in remote.c.Check if you run itEPSS 0.56%May 15, 2026
- Medium6.5Medical Management System a81df1ce700a9662cb136b27af47f4cbde64156b is vulnerable to Insecure Permissions, which allows arbitrary user password reset.Check if you run itEPSS 0.22%May 15, 2026
- Medium4.1* Countermeasures for DPA within SYMCRYPTO engine on SixG301xxx devices are not sufficiently random and will eventually repeat.Check if you run itEPSS 0.15%May 15, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: ptrace: slightly saner 'get_dumpable()' logic The 'dumpability' of a task is fundamentally about th…Check if you run itEPSS 4.30%May 15, 2026
- Critical9.2Diagram's export module is vulnerable to Path Traversal in src attribute due to lack of HTML sanitization.Check if you run itEPSS 0.40%May 15, 2026
- Critical10.0PDF Export Module used in DHTMLX's products Gantt and Scheduler is vulnerable to Remote Code Execution due to lack of "data" parameter sanitization.Check if you run itEPSS 0.65%May 15, 2026
- Critical9.2PDF Export Module used in DHTMLX's products Gantt and Scheduler is vulnerable to Path Traversal due to lack of HTML sanitization.Check if you run itEPSS 0.50%May 15, 2026
Sort