Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8OpenOlat is an open source web-based e-learning platform for teaching, learning, assessment and communication.Check if you run itEPSS 0.21%Mar 30, 2026
- Critical9.8DSAI-Cline's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanism completely ineffective.Check if you run itEPSS 1.19%Mar 30, 2026
- Critical9.8In its design for automatic terminal command execution, HAI Build Code Generator offers two options: Execute safe commands and Execute all commands.Check if you run itEPSS 0.53%Mar 30, 2026
- Critical9.8In its design for automatic terminal command execution, SakaDev offers two options: Execute safe commands and execute all commands.Check if you run itEPSS 0.70%Mar 30, 2026
- High8.8OpenOlat is an open source web-based e-learning platform for teaching, learning, assessment and communication.Check if you run itEPSS 0.42%Mar 30, 2026
- High7.2CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Check if you run itEPSS 0.37%Mar 30, 2026
- High7.8Gotenberg is an API for converting document formats.Check if you run itEPSS 1.70%Mar 30, 2026
- High7.5NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging Platform.Check if you run itEPSS 0.49%Mar 30, 2026
- Medium5.5A security vulnerability has been detected in code-projects Accounting System 1.0.Check if you run itEPSS 0.33%Mar 30, 2026
- Low2.0A weakness has been identified in YunaiV yudao-cloud up to 2026.01.Check if you run itEPSS 0.26%Mar 30, 2026
- Critical9.4Nginx UI is a web user interface for the Nginx web server.Check if you run itEPSS 0.33%Mar 30, 2026
- High7.4Tautulli is a Python based monitoring and tracking tool for Plex Media Server.Check if you run itEPSS 0.35%Mar 30, 2026
- High8.7Tautulli is a Python based monitoring and tracking tool for Plex Media Server.Check if you run itEPSS 1.97%Mar 30, 2026
- Medium5.3Tautulli is a Python based monitoring and tracking tool for Plex Media Server.Check if you run itEPSS 0.28%Mar 30, 2026
- Medium4.9Tautulli is a Python based monitoring and tracking tool for Plex Media Server.Check if you run itEPSS 0.41%Mar 30, 2026
- Critical9.8Roo Code's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanism completely ineffective.Check if you run itEPSS 1.19%Mar 30, 2026
- Critical9.8Syntx's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mechanism completely ineffective.Check if you run itEPSS 1.19%Mar 30, 2026
- High7.5Tautulli is a Python based monitoring and tracking tool for Plex Media Server.Check if you run itEPSS 0.49%Mar 30, 2026
- Medium5.9A flaw in V8's string hashing mechanism causes integer-like strings to be hashed to their numeric value, making hash collisions trivially predictable.Check if you run itEPSS 0.27%Mar 30, 2026
- Low3.3An incomplete fix for CVE-2024-36137 leaves and in the promises API without the required permission checks, while their callback-based equivalents ( , ) were correctly…Check if you run itEPSS 0.14%Mar 30, 2026
- Low3.3A flaw in Node.js Permission Model filesystem enforcement leaves without the required read permission checks, while all comparable filesystem functions correctly enfor…Check if you run itEPSS 0.15%Mar 30, 2026
- Medium5.3A memory leak occurs in Node.js HTTP/2 servers when a client sends WINDOW_UPDATE frames on stream 0 (connection-level) that cause the flow control window to exceed the…Check if you run itEPSS 0.43%Mar 30, 2026
- Medium5.9A flaw in Node.js HMAC verification uses a non-constant-time comparison when validating user-provided signatures, potentially leaking timing information proportional t…Check if you run itEPSS 0.37%Mar 30, 2026
- Medium5.3A flaw in Node.js Permission Model network enforcement leaves Unix Domain Socket (UDS) server operations without the required permission checks, while all comparable n…Check if you run itEPSS 0.17%Mar 30, 2026
- High7.5Node.js: Node.js: Denial of Service due to crafted HTTP headerCheck this weekEPSS 25.44%Mar 30, 2026
Sort