Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.8Bludit is vulnerable to Stored Cross-Site Scripting (XSS) in its image upload functionality.Check if you run itEPSS 0.19%Mar 27, 2026
- Medium5.9Doveadm credentials are verified using direct comparison which is susceptible to timing oracle attack.Check if you run itEPSS 0.43%Mar 27, 2026
- High8.2Dovecot SQL based authentication can be bypassed when auth_username_chars is cleared by admin.Check if you run itEPSS 0.40%Mar 27, 2026
- Low1.9A weakness has been identified in code-projects Exam Form Submission 1.0.Check if you run itEPSS 0.35%Mar 27, 2026
- High7.7MyTube is a self-hosted downloader and player for several video websites Prior to version 1.8.72, an unauthenticated attacker can lock out administrator and visitor ac…Check if you run itEPSS 0.80%Mar 27, 2026
- High8.9MyTube is a self-hosted downloader and player for several video websites Prior to version 1.8.71, an unauthenticated attacker can register an arbitrary passkey and sub…Check if you run itEPSS 0.70%Mar 27, 2026
- Medium6.5Open Source Point of Sale (opensourcepos) is a web based point of sale application written in PHP using CodeIgniter framework.Check if you run itEPSS 0.35%Mar 27, 2026
- High7.2Metabase is an open source business intelligence and embedded analytics tool.Check if you run itEPSS 0.78%Mar 27, 2026
- High8.1Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Check if you run itEPSS 0.38%Mar 27, 2026
- Medium4.3Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Check if you run itEPSS 0.42%Mar 27, 2026
- Medium5.1The vulnerability affecting TL-WR850N v3 allows cleartext storage of administrative and Wi-Fi credentials in a region of the device’s flash memory while the serial int…Check if you run itEPSS 0.18%Mar 26, 2026
- Medium5.3In the Drupal 7 Internationalization (i18n) module, the i18n_node submodule allows a user with both "Translate content" and "Administer content translations" permissio…Check if you run itEPSS 0.40%Mar 26, 2026
- High7.2PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser.Check if you run itEPSS 3.44%Mar 26, 2026
- Medium5.5PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser.Check if you run itEPSS 0.37%Mar 26, 2026
- Medium6.9Ruckus Access Point products contain an arbitrary file read vulnerability in the command-line interface that allows authenticated remote attackers with administrative…Check if you run itEPSS 0.46%Mar 26, 2026
- High7.2A flaw was found in Keycloak.Check if you run itEPSS 0.53%Mar 26, 2026
- High8.1Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists.Check if you run itEPSS 0.38%Mar 26, 2026
- Medium5.5Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists.Check if you run itEPSS 0.40%Mar 26, 2026
- High7.2Ory Hydra is an OAuth 2.0 Server and OpenID Connect Provider.Check if you run itEPSS 0.45%Mar 26, 2026
- High7.2Ory Kratos is an identity, user management and authentication system for cloud services.Check if you run itEPSS 0.34%Mar 26, 2026
- Medium4.9Mattermost versions 11.4.x <= 11.4.0, 11.3.x <= 11.3.1, 11.2.x <= 11.2.3, 10.11.x <= 10.11.11 fail to validate Advanced Logging file target paths which allows system a…Check if you run itEPSS 0.47%Mar 26, 2026
- High8.8Mattermost versions 11.2.x <= 11.2.2, 10.11.x <= 10.11.10, 11.4.x <= 11.4.0, 11.3.x <= 11.3.1 fail to sanitize user-controlled post content in the mmctl commands termi…Check if you run itEPSS 0.34%Mar 26, 2026
- Medium6.5Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras.Check if you run itEPSS 0.35%Mar 26, 2026
- High7.3Briefcase is a tool for converting a Python project into a standalone native application.Check if you run itEPSS 0.15%Mar 26, 2026
- Medium6.1A reflected cross-site scripting (XSS) vulnerability in the /admin/menus component of Lightcms v2.0 allows attackers to execute arbitrary Javascript in the context of…Check if you run itEPSS 0.25%Mar 26, 2026