Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical10.0An Improper Access Control vulnerability in several internal API endpoints for Google Cloud Application Integration prior to 2026-01-23 allows a remote, unauthenticate…Check if you run itEPSS 0.53%May 15, 2026
- Medium4.3The Notify Odoo plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.1.Check if you run itEPSS 0.20%May 15, 2026
- High8.1The FOX – Currency Switcher Professional for WooCommerce plugin for WordPress is vulnerable to unauthorized data loss due to a missing capability check on the 'admin_h…Check if you run itEPSS 0.50%May 15, 2026
- High8.5Cross-site request forgery vulnerability exists in Musetheque V4 Information Disclosure for IPKNOWLEDGE V4L1 rev2203.0 and earlier.Check if you run itEPSS 0.19%May 15, 2026
- Medium5.3WWW::Mechanize::Cached versions before 2.00 for Perl deserialize cached HTTP responses from a world-writable on-disk cache, enabling local response forgery and code execution.Check if you run itEPSS 0.31%May 15, 2026
- Low2.1The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers.Check if you run itEPSS 0.27%May 14, 2026
- Low3.5The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers.Check if you run itEPSS 0.25%May 14, 2026
- Medium4.7python-utcp is the python implementation of UTCP.Check if you run itEPSS 0.20%May 14, 2026
- High8.6Crabbox prior to v0.12.0 contains a privilege escalation vulnerability that allows users with shared visibility-only access to obtain Code, WebVNC, and Egress agent ti…Check if you run itEPSS 0.46%May 14, 2026
- Medium6.9Fleet is open source device management software.Check if you run itEPSS 0.39%May 14, 2026
- High8.7Fleet is open source device management software.Check if you run itEPSS 0.54%May 14, 2026
- Medium6.9Fleet is open source device management software.Check if you run itEPSS 0.43%May 14, 2026
- High8.7Crabbox prior to v0.12.0 contains an authentication bypass vulnerability that allows non-admin shared-token callers to impersonate other owners or organizations by spo…Check if you run itEPSS 0.69%May 14, 2026
- High8.6Note Mark is an open-source note-taking application.Check if you run itEPSS 0.72%May 14, 2026
- High8.2Fleet is open source device management software.Check if you run itEPSS 0.21%May 14, 2026
- Low2.1Strapi is an open source headless content management system.Check if you run itEPSS 0.34%May 14, 2026
- Critical9.3Strapi is an open source headless content management system.Check if you run itEPSS 1.18%May 14, 2026
- Medium6.9Strapi is an open source headless content management system.Check if you run itEPSS 0.49%May 14, 2026
- Medium5.7Docling-Graph turns documents into validated Pydantic objects, then builds a directed knowledge graph with explicit semantic relationships.Check if you run itEPSS 0.31%May 14, 2026
- Medium4.3etcd is a distributed key-value store for the data of a distributed system.Check if you run itEPSS 0.27%May 14, 2026
- Medium6.9Pode is a Cross-Platform PowerShell web framework for creating REST APIs, Web Sites, and TCP/SMTP servers.Check if you run itEPSS 0.49%May 14, 2026
- High7.6Valtimo is an open-source business process automation platform.Check if you run itEPSS 0.34%May 14, 2026
- Low2.3Nextcloud News is an RSS/Atom feed reader.Check if you run itEPSS 0.29%May 14, 2026
- High8.6A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an unauthenticated, remote attacker to read arbitrary files that a…Check if you run itEPSS 1.09%May 14, 2026
- Medium5.9Gotenberg is a Docker-powered stateless API for PDF files.Check if you run itEPSS 0.36%May 14, 2026