Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.4OpenBao is an open source identity-based secrets management system.Check if you run itEPSS 0.30%Mar 27, 2026
- High8.3OpenBao is an open source identity-based secrets management system.Check if you run itEPSS 0.42%Mar 27, 2026
- High8.8Group-Office is an enterprise customer relationship management and groupware tool.Check if you run itEPSS 0.39%Mar 27, 2026
- High7.5The brace-expansion library generates arbitrary strings containing a common prefix and suffix.Check if you run itEPSS 0.45%Mar 27, 2026
- High8.2BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner.Check if you run itEPSS 0.48%Mar 27, 2026
- Medium5.1Traefik is an HTTP reverse proxy and load balancer.Check if you run itEPSS 0.49%Mar 27, 2026
- Low1.2GlobaLeaks is free and open-source whistleblowing software.Check if you run itEPSS 0.20%Mar 27, 2026
- High8.2calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books.Check if you run itEPSS 0.22%Mar 27, 2026
- Medium4.8calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books.Check if you run itEPSS 0.18%Mar 27, 2026
- Medium4.3In Blog.Core through bcb4d17, the getinfobytoken API interface contains improper access control that leads to sensitive data exposure.Check if you run itEPSS 0.29%Mar 27, 2026
- High7.5Server-Side Request Forgery (SSRF) vulnerability exists in the AnnounContent of the /admin/read.php in OTCMS V7.66 and before.Check if you run itEPSS 0.52%Mar 27, 2026
- Critical9.6In its design for automatic terminal command execution, AI Code offers two options: Execute safe commands and execute all commands.Check if you run itEPSS 0.45%Mar 27, 2026
- Critical9.8The command auto-approval module in Axon Code contains an OS Command Injection vulnerability, rendering its whitelist security mechanism ineffective.Check if you run itEPSS 1.43%Mar 27, 2026
- High7.5A path traversal vulnerability exists in the awesome-llm-apps project in commit e46690f99c3f08be80a9877fab52acacf7ab8251 (2026-01-19) in the Beifong AI News and Podcas…Check if you run itEPSS 0.58%Mar 27, 2026
- Medium6.5A testdata data-source can be used to trigger out-of-memory crashes in Grafana.Check if you run itEPSS 0.39%Mar 27, 2026
- High7.5The OpenFeature feature toggle evaluation endpoint reads unbounded values into memory, which can cause out-of-memory crashes.Check if you run itEPSS 0.79%Mar 27, 2026
- Medium6.5A resample query can be used to trigger out-of-memory crashes in Grafana.Check if you run itEPSS 0.39%Mar 27, 2026
- High7.5When using public dashboards and direct data-sources, all direct data-sources' passwords are exposed despite not being used in dashboards.Check if you run itEPSS 0.31%Mar 27, 2026
- Critical9.1A chained attack via SQL Expressions and a Grafana Enterprise plugin can lead to a remote arbitrary code execution impact (RCE).Check if you run itEPSS 1.96%Mar 27, 2026
- Critical9.3Vulnerable versions of Coverity Connect lack an error handler in the authentication logic for command line tooling that makes it vulnerable to an authentication bypass.Check if you run itEPSS 0.55%Mar 27, 2026
- Medium6.5BS Producten Petcam 33.1.0.0818 is vulnerable to Incorrect Access Control.Check if you run itEPSS 0.18%Mar 27, 2026
- High7.2A buffer overflow vulnerability exists in the ONVIF GetStreamUri function of LSC Indoor Camera V7.6.32.Check if you run itEPSS 0.56%Mar 27, 2026
- Medium6.1A Reflected Cross-Site Scripting (XSS) vulnerability has been identified in DSpace JSPUI 6.5 within the search/discover filtering functionality.Check if you run itEPSS 0.22%Mar 27, 2026
- High7.3Insertion of Sensitive Information into Log File vulnerability in the SCIM Driver module in OpenText IDM Driver and Extensions on Windows, Linux, 64 bit allows authent…Check if you run itEPSS 0.11%Mar 27, 2026
- Medium5.1ByteDance DeerFlow versions prior to commit 5dbb362 contain a stored cross-site scripting vulnerability in the artifacts API that allows attackers to execute arbitrary…Check if you run itEPSS 0.20%Mar 27, 2026
Sort