Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4Invoice Ninja is a source-available invoice, quote, project and time-tracking app built with Laravel.Check if you run itEPSS 0.30%Mar 26, 2026
- Medium6.5PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser.Check if you run itEPSS 0.44%Mar 26, 2026
- Medium4.3PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser.Check if you run itEPSS 0.38%Mar 26, 2026
- Medium5.5PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser.Check if you run itEPSS 0.37%Mar 26, 2026
- High7.5A flaw was found in p11-kit.Check if you run itEPSS 1.26%Mar 26, 2026
- Medium5.5A flaw was found in libssh.Check if you run itEPSS 0.22%Mar 26, 2026
- Medium6.3A malicious SCP server can send unexpected paths that could make the client application override local files outside of working directory.Check if you run itEPSS 0.41%Mar 26, 2026
- Medium4.3A flaw was found in Keycloak.Check if you run itEPSS 0.34%Mar 26, 2026
- High8.8Ory Polis, formerly known as BoxyHQ Jackson, bridges or proxies a SAML login flow to OAuth 2.0 or OpenID Connect.Check if you run itEPSS 0.42%Mar 26, 2026
- High8.1Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists.Check if you run itEPSS 0.38%Mar 26, 2026
- High7.2Ory Hydra is an OAuth 2.0 Server and OpenID Connect Provider.Check if you run itEPSS 0.45%Mar 26, 2026
- Medium5.3Syft is a a CLI tool and Go library for generating a Software Bill of Materials (SBOM) from container images and filesystems.Check if you run itEPSS 0.52%Mar 26, 2026
- High8.8Mattermost versions 11.2.x <= 11.2.2, 10.11.x <= 10.11.10, 11.4.x <= 11.4.0, 11.3.x <= 11.3.1 fail to sanitize user-controlled post content in the mmctl commands termi…Check if you run itEPSS 0.34%Mar 26, 2026
- Medium6.9The Angular SSR is a server-rise rendering tool for Angular applications.Check if you run itEPSS 0.33%Mar 26, 2026
- High8.8etcd is a distributed key-value store for the data of a distributed system.Check if you run itEPSS 0.34%Mar 26, 2026
- Medium6.5etcd is a distributed key-value store for the data of a distributed system.Check if you run itEPSS 0.26%Mar 26, 2026
- Medium4.3The Conditional Menus plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.6.Check if you run itEPSS 0.16%Mar 26, 2026
- Medium6.8River Past Audio Converter 7.7.16 contains a local buffer overflow vulnerability in the activation code field that allows local attackers to crash the application by s…Check if you run itEPSS 0.11%Mar 26, 2026
- Medium6.8Excel Password Recovery Professional 8.2.0.0 contains a local buffer overflow vulnerability that allows attackers to cause a denial of service by supplying an excessiv…Check if you run itEPSS 0.18%Mar 26, 2026
- High8.5Allok Video Splitter 3.1.1217 contains a buffer overflow vulnerability that allows local attackers to cause a denial of service or execute arbitrary code by supplying…Check if you run itEPSS 0.26%Mar 26, 2026
- High8.8Online Store System CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through…Check if you run itEPSS 0.33%Mar 26, 2026
- Critical9.3plank/laravel-mediable through version 6.4.0 can allow upload of a dangerous file type when an application using the package accepts or prefers a client-supplied MIME…Check if you run itEPSS 1.14%Mar 26, 2026
- High8.8The VSL privileged helper does utilize NSXPC for IPC.Check if you run itEPSS 0.45%Mar 26, 2026
- Low3.1A flaw was found in Keycloak.Check if you run itEPSS 0.33%Mar 26, 2026
- High8.8Each RPCSEC_GSS data packet is validated by a routine which checks a signature in the packet.Check if you run itEPSS 1.11%Mar 26, 2026