Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8OpenAEV is an open source platform allowing organizations to plan, schedule and conduct cyber adversary simulation campaign and tests.Check if you run itEPSS 0.90%Apr 20, 2026
- High7.2Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.…Check if you run itEPSS 1.47%Apr 20, 2026
- Low2.1A vulnerability was determined in Qibo CMS 1.0.Check if you run itEPSS 0.21%Apr 20, 2026
- Medium5.7An improper access control vulnerability in the canonical-livepatch snap client prior to version 10.15.0 allows a local unprivileged user to obtain a sensitive, root-l…Check if you run itEPSS 0.12%Apr 20, 2026
- Critical9.8SGLang's reranking endpoint (/v1/rerank) achieves Remote Code Execution (RCE) when a model file containing a malcious tokenizer.chat_template is loaded, as the Jinja2…Check if you run itEPSS 0.85%Apr 20, 2026
- High7.2OS Command Injection Remote Code Execution Vulnerability in UI in Progress ADC Products allows an authenticated attacker with “All” permissions to execute arbitrary co…Check if you run itEPSS 2.13%Apr 20, 2026
- High7.2OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an authenticated attacker with “VS Administration” permissions to execu…Check if you run itEPSS 2.13%Apr 20, 2026
- High7.2OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an authenticated attacker with “All” permissions to execute arbitrary c…Check this weekEPSS 16.88%Apr 20, 2026
- High7.2OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an authenticated attacker with “Geo Administration” permissions to exec…Check this weekEPSS 15.49%Apr 20, 2026
- Medium5.3Information exposure vulnerability has been identified in Apache Kafka.Check if you run itEPSS 0.63%Apr 20, 2026
- Critical9.1A possible security vulnerability has been identified in Apache Kafka.Check if you run itEPSS 0.90%Apr 20, 2026
- Medium5.3Apache Doris MCP Server versions earlier than 0.6.1 are affected by an improper neutralization flaw in query context handling that may allow execution of unintended SQ…Check if you run itEPSS 0.66%Apr 20, 2026
- Low2.0A vulnerability was found in Qibo CMS 1.0.Check if you run itEPSS 0.19%Apr 20, 2026
- Low2.1A vulnerability was detected in p2r3 convert up to 6998584ace3e11db66dff0b423612a5cf91de75b.Check if you run itEPSS 0.47%Apr 20, 2026
- Medium5.5A security vulnerability has been detected in rowboatlabs rowboat up to 0.1.67.Check if you run itEPSS 0.47%Apr 20, 2026
- Low2.1A weakness has been identified in usememos memos up to 0.22.1.Check if you run itEPSS 0.25%Apr 20, 2026
- Low2.0A security flaw has been discovered in Yifang CMS up to 2.0.5.Check if you run itEPSS 0.25%Apr 20, 2026
- Low2.1When sed is invoked with both -i (in-place edit) and --follow-symlinks, the function open_next_file() performs two separate, non-atomic filesystem operations on the same path: 1.Check if you run itEPSS 0.14%Apr 20, 2026
- Medium5.1Double-Free / Use-After-Free (UAF) in the and functions in the thin_vec crate.Check if you run itEPSS 0.17%Apr 20, 2026
- High7.4A vulnerability was identified in Tenda F451 1.0.0.7_cn_svn7958.Check if you run itEPSS 0.45%Apr 20, 2026
- High7.4A vulnerability was determined in Tenda F451 1.0.0.7_cn_svn7958.Check if you run itEPSS 0.54%Apr 20, 2026
- High7.4A vulnerability was found in Tenda F451 1.0.0.7_cn_svn7958.Check if you run itEPSS 0.45%Apr 20, 2026
- Medium5.5A vulnerability has been found in Metasoft 美特软件 MetaCRM up to 6.4.0.Check if you run itEPSS 0.26%Apr 20, 2026
- Low2.1A flaw has been found in phili67 Ecclesia CRM up to 8.0.0.Check if you run itEPSS 0.20%Apr 20, 2026
- Low2.1A vulnerability was detected in Cockpit-HQ Cockpit up to 2.13.5.Check if you run itEPSS 0.23%Apr 20, 2026
Sort