Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.4Windmill CE and EE versions 1.276.0 through 1.603.2 contain an SQL injection vulnerability in the folder ownership management functionality that allows authenticated a…Check this weekEPSS 13.58%Apr 7, 2026
- High8.7Windmill versions 1.56.0 through 1.614.0 contain a missing authorization vulnerability that allows users with the Operator role to perform prohibited entity creation a…Check if you run itEPSS 2.61%Apr 7, 2026
- Medium6.1yaffa v2.0.0 is vulnerable to Cross Site Scripting (XSS).Check if you run itEPSS 0.28%Apr 7, 2026
- Medium5.3The Backup Migration plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 2.0.0.Check if you run itEPSS 0.58%Apr 7, 2026
- High7.0A flaw was found in libssh.Check if you run itEPSS 0.14%Apr 7, 2026
- Critical9.8The Send Basket functionality in Koha Library before 23.05.10 is susceptible to Time-Based SQL Injection because it fails to sanitize the POST parameter bib_list in /c…Check if you run itEPSS 0.50%Apr 7, 2026
- Medium5.5A flaw was found in libarchive.Check if you run itEPSS 0.17%Apr 7, 2026
- High8.6Smart contract Marginal v1 performs unsafe downcast, allowing attackers to settle a large debt position for a negligible asset cost.Check if you run itEPSS 0.27%Apr 7, 2026
- Medium4.8Emissary is a P2P based data-driven workflow engine.Check if you run itEPSS 0.18%Apr 7, 2026
- High7.6ChurchCRM is an open-source church management system.Check if you run itEPSS 0.17%Apr 7, 2026
- High7.5Strawberry GraphQL is a library for creating GraphQL APIs.Check if you run itEPSS 0.29%Apr 7, 2026
- High8.8FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface.Check if you run itEPSS 0.71%Apr 7, 2026
- High8.8FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface.Check if you run itEPSS 0.71%Apr 7, 2026
- High8.8FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface.Check if you run itEPSS 0.55%Apr 7, 2026
- High8.8FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface.Check if you run itEPSS 0.71%Apr 7, 2026
- High8.8FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface.Check if you run itEPSS 0.87%Apr 7, 2026
- Medium5.0LinkAce is a self-hosted archive to collect website links.Check if you run itEPSS 0.29%Apr 7, 2026
- Medium6.3Nest is a framework for building scalable Node.js server-side applications.Check if you run itEPSS 0.24%Apr 7, 2026
- Medium6.5Kedro-Datasets is a Kendo plugin providing data connectors.Check if you run itEPSS 0.44%Apr 7, 2026
- Medium6.1FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface.Check if you run itEPSS 0.16%Apr 7, 2026
- Critical9.8changedetection.io is a free open source web page change detection tool.Check if you run itEPSS 0.55%Apr 7, 2026
- High7.3Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists.Check if you run itEPSS 0.23%Apr 7, 2026
- High8.1Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists.Check if you run itEPSS 0.39%Apr 7, 2026
- Medium5.3text-generation-webui is an open-source web interface for running Large Language Models.Check if you run itEPSS 0.27%Apr 7, 2026
- High7.5text-generation-webui is an open-source web interface for running Large Language Models.Check if you run itEPSS 0.42%Apr 7, 2026
Sort