Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.4Renovate before 44.79.0 SSRF via HTTP Preset URLs and customDatasourcesCheck if you run itEPSS 0.23%Oct 14, 2026
- Medium5.3Renovate before 44.61.3 minimumReleaseAge Bypass via PR Rebase RequestCheck if you run itEPSS 0.21%Oct 14, 2026
- High7.1Renovate before 44.60.1 HTTP Header Allowlist Bypass via Shared PresetsCheck if you run itEPSS 0.18%Oct 14, 2026
- Medium6.3Better Auth drizzle-adapter 1.6.17 before 1.7.7 Rate Limit Bypass via Race ConditionCheck if you run itEPSS 0.22%Oct 14, 2026
- High8.2Parse Server before 8.6.97 and 9.0.0 before 9.10.2-alpha.6 does not handle errors raised while sending verification or password reset emails, causing the server process to exit.Check if you run itEPSS 0.26%Oct 14, 2026
- Medium6.3n8n before 1.123.83, 2.41.4, and 2.42.1 Unauthenticated Workflow Execution via Dynamic-Path Webhook ResolutionCheck if you run itEPSS 0.36%Oct 14, 2026
- Medium6.1n8n before 2.41.4 and 2.42.1 Cross-Project Agent Ownership Transfer via Agents Create EndpointCheck if you run itEPSS 0.23%Oct 14, 2026
- UnknownCVE-2026-110816 affecting package python-tensorboard 2.16.2-6Open the advisoryOct 14, 2026
- Medium6.3qs.stringify with arrayFormat comma throws TypeError on array elements that cannot be coerced to a stringCheck if you run itEPSS 0.30%Oct 14, 2026
- Critical9.1When the default self-signed certificate is used, an attacker could gain administrative access to the application.Check if you run itEPSS 0.22%Oct 14, 2026
- Critical9.1When the password reset functionality is enabled, and email is configured, an attacker could take over any account using a brute-force attack.Check if you run itEPSS 0.24%Oct 14, 2026
- UnknownMalicious code in saeka (PyPI)Open the advisoryOct 14, 2026
- Low1.2CVE-2026-0317 PAN-OS: Denial of Service Vulnerability (Severity: LOW)Check if you run itEPSS 0.30%Oct 14, 2026
- Low3.7FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.Check if you run itEPSS 0.23%Oct 14, 2026
- Medium6.5Plane is an open-source project management tool.Check if you run itEPSS 0.30%Oct 14, 2026
- High8.1FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.Check if you run itEPSS 0.50%Oct 14, 2026
- High8.2OpenAEV is an open source platform allowing organizations to plan, schedule and conduct cyber adversary simulation campaign and tests.Check if you run itEPSS 0.24%Oct 14, 2026
- Critical9.8WeGIA is a web manager for charitable institutions.Check if you run itEPSS 0.47%Oct 14, 2026
- High8.8WeGIA is a web manager for charitable institutions.Check if you run itEPSS 0.45%Oct 14, 2026
- Critical9.8WeGIA: Unauthenticated SQL Injection in cadastro_cobranca.php via "codigo" parameterCheck if you run itEPSS 0.49%Oct 14, 2026
- Critical9.8WeGIA: SQL Injection in html/socio/sistema/cadastro_cobranca.phpCheck if you run itEPSS 0.47%Oct 14, 2026
- Unknowncurl vulnerabilitiesOpen the advisoryOct 14, 2026
- Medium6.8InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates.Check if you run itEPSS 0.45%Oct 14, 2026
- High7.2InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates.Check if you run itEPSS 0.34%Oct 14, 2026
- Medium5.3InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates.Check if you run itEPSS 0.28%Oct 14, 2026