Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.2n8n before 2.41.4 and 2.42.1 Unauthenticated Unbounded OAuth Client Persistence via Authorize EndpointCheck if you run itEPSS 0.29%Oct 14, 2026
- Medium5.3FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.Check if you run itEPSS 0.42%Oct 14, 2026
- Medium5.4FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.Check if you run itEPSS 0.22%Oct 14, 2026
- Medium4.8FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.Check if you run itEPSS 0.19%Oct 14, 2026
- Medium6.9Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code.Check if you run itEPSS 0.21%Oct 14, 2026
- High8.2OpenAEV is an open source platform allowing organizations to plan, schedule and conduct cyber adversary simulation campaign and tests.Check if you run itEPSS 0.24%Oct 14, 2026
- Unknowncurl vulnerabilitiesOpen the advisoryOct 14, 2026
- Medium5.3InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates.Check if you run itEPSS 0.28%Oct 14, 2026
- High8.8Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code.Check if you run itEPSS 0.43%Oct 14, 2026
- Low3.7cpp-httplib is a C++ header-only HTTP/HTTPS library.Check if you run itEPSS 0.37%Oct 14, 2026
- High7.5cpp-httplib is a C++ header-only HTTP/HTTPS library.Check if you run itEPSS 0.36%Oct 14, 2026
- High8.7HTTP Request SmugglingCheck if you run itEPSS 0.27%Oct 14, 2026
- Medium6.9In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the vertx-mail-client does not sanitize CR (\r) or LF (\n) characters…Check if you run itEPSS 0.32%Oct 14, 2026
- High8.6Incorrect AuthorizationCheck if you run itEPSS 0.32%Oct 14, 2026
- Medium6.8BentoPDF is a privacy-focused PDF toolkit that runs in the browser.Check if you run itEPSS 0.20%Oct 14, 2026
- High8.2dbt enables data analysts and engineers to transform their data using the same practices that software engineers use to build applications.Check if you run itEPSS 0.35%Oct 14, 2026
- Medium5.3Colanode Server through 0.4.7 Path Traversal via Avatar Download RouteCheck if you run itEPSS 0.29%Oct 14, 2026
- High7.5Mongoose is an embedded web server and network library.Check if you run itEPSS 0.23%Oct 14, 2026
- High8.7The NetX Secure DTLS server sends a HelloVerifyRequest carrying a freshly generated cookie, but never checks the cookie a client returns.Check if you run itEPSS 0.32%Oct 14, 2026
- Critical9.3When a TLS 1.3 client processes a HelloRetryRequest, it copies the server's cookie into its second ClientHello without checking that the cookie fits in the outgoing packet.Check if you run itEPSS 0.28%Oct 14, 2026
- Critical9.1In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x HTTP client relies on an SSL context for efficiency purpose, the key of this c…Check if you run itEPSS 0.23%Oct 14, 2026
- High7.0SeaweedFS is a distributed storage system for files and blobs.Check if you run itEPSS 0.42%Oct 14, 2026
- High7.5The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients.Check if you run itEPSS 0.70%Oct 14, 2026
- High7.5The Model Context Protocol Java SDK is the official Java SDK for Model Context Protocol servers and clients.Check if you run itEPSS 0.61%Oct 14, 2026
- High8.2Improper Validation of Consistency within Input vulnerability in Erlang OTP ssl (tls_handshake_1_3, ssl_handshake and tls_client_ticket_store modules) allows a malicio…Check if you run itEPSS 0.47%Oct 14, 2026