Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Wazuh is a free and open source platform used for threat prevention, detection, and response.Check if you run itEPSS 0.21%Apr 29, 2026
- Medium5.5A vulnerability was identified in NousResearch hermes-agent 0.8.0.Check if you run itEPSS 0.48%Apr 29, 2026
- Low2.0A vulnerability was determined in SourceCodester Pizzafy Ecommerce System 1.0.Check if you run itEPSS 0.24%Apr 29, 2026
- High8.8This vulnerability impacts all versions of IdentityIQ and allows an authenticated identity that is the requestor or assignee of a work item to edit the definition of a…Check if you run itEPSS 0.16%Apr 29, 2026
- Medium5.5Wazuh is a free and open source platform used for threat prevention, detection, and response.Check if you run itEPSS 0.17%Apr 29, 2026
- Critical10.0DocsGPT is a GPT-powered chat for documentation.Check if you run itEPSS 1.17%Apr 29, 2026
- Low2.0A vulnerability was found in SourceCodester Pizzafy Ecommerce System 1.0.Check if you run itEPSS 0.27%Apr 29, 2026
- Low2.1A vulnerability has been found in SourceCodester Pharmacy Sales and Inventory System 1.0.Check if you run itEPSS 0.19%Apr 29, 2026
- Low2.1A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0.Check if you run itEPSS 0.19%Apr 29, 2026
- Medium5.3An authorization flaw in the user management command could allow an authenticated user to make limited changes to authentication-related data associated with another user account.Check if you run itEPSS 0.17%Apr 29, 2026
- High7.1Computing the MD5 checksum of a malformed BSON object under specific conditions may cause loss of availability in MongoDB server.Check if you run itEPSS 0.26%Apr 29, 2026
- Medium4.9A post-authentication Stack-based Buffer Overflow vulnerabilities in SonicOS allows a remote attacker to crash a firewall.Check if you run itEPSS 0.50%Apr 29, 2026
- Medium6.8A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted services.Check if you run itEPSS 0.39%Apr 29, 2026
- High8.0A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be accessible under specific conditions.Check if you run itEPSS 0.38%Apr 29, 2026
- Low2.0A vulnerability was detected in SourceCodester Pharmacy Sales and Inventory System 1.0.Check if you run itEPSS 0.19%Apr 29, 2026
- Medium5.5A security vulnerability has been detected in EyouCMS up to 1.7.9.Check if you run itEPSS 0.26%Apr 29, 2026
- Low2.0A weakness has been identified in EyouCMS up to 1.7.9.Check if you run itEPSS 0.24%Apr 29, 2026
- Medium5.5A flaw has been found in fatbobman mail-mcp-bridge up to 1.3.3.Check if you run itEPSS 0.43%Apr 29, 2026
- High8.8Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Par…Check if you run itEPSS 1.01%Apr 29, 2026
- Critical9.6Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Software…Check if you run itEPSS 0.33%Apr 29, 2026
- High7.5pgjdbc is an open source postgresql JDBC Driver.Check if you run itEPSS 3.26%Apr 29, 2026
- Medium4.8Helpy contains a stored cross-site scripting vulnerability in the knowledge base Doc rendering logic.Check if you run itEPSS 0.18%Apr 29, 2026
- Medium5.1Helpy contains a stored cross-site scripting vulnerability in the post author display logic.Check if you run itEPSS 0.18%Apr 29, 2026
- Medium6.5Cockpit 2.13.5 and earlier is vulnerable to directory traversal via the Buckets component.Check if you run itEPSS 0.84%Apr 29, 2026
- High8.8Cockpit 2.13.5 and earlier is affected by a misconfiguration within the Bucket component _isFileTypeAllowed function where a specially crafted filename bypasses an ext…Check if you run itEPSS 0.38%Apr 29, 2026
Sort