Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.2Improper Handling of Case Sensitivity vulnerability in Drupal OpenID Connect / OAuth client allows Privilege Escalation.This issue affects OpenID Connect / OAuth clien…Check if you run itEPSS 0.14%Mar 26, 2026
- Medium6.5Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal OpenID Connect / OAuth client allows Authentication Bypass.This issue affects OpenID C…Check if you run itEPSS 0.26%Mar 26, 2026
- Medium4.3Server-Side Request Forgery (SSRF) vulnerability in Drupal OpenID Connect / OAuth client allows Server Side Request Forgery.This issue affects OpenID Connect / OAuth c…Check if you run itEPSS 0.17%Mar 26, 2026
- Medium6.1Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Google Analytics GA4 allows Cross-Site Scripting (XSS).Thi…Check if you run itEPSS 0.25%Mar 26, 2026
- Medium6.1Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Calculation Fields allows Cross-Site Scripting (XSS).This…Check if you run itEPSS 0.25%Mar 26, 2026
- Medium6.5Missing Authentication for Critical Function vulnerability in Drupal AJAX Dashboard allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…Check if you run itEPSS 0.25%Mar 26, 2026
- Medium5.3Incorrect Authorization vulnerability in Drupal File Access Fix (deprecated) allows Forceful Browsing.This issue affects File Access Fix (deprecated): from 0.0.0 before 1.2.0.Check if you run itEPSS 0.27%Mar 26, 2026
- Medium5.3Incorrect Authorization vulnerability in Drupal File Access Fix (deprecated) allows Forceful Browsing.This issue affects File Access Fix (deprecated): from 0.0.0 before 1.2.0.Check if you run itEPSS 0.19%Mar 26, 2026
- Medium5.4Invoice Ninja is a source-available invoice, quote, project and time-tracking app built with Laravel.Check if you run itEPSS 0.21%Mar 26, 2026
- Medium4.8Lychee is a free, open-source photo-management tool.Check if you run itEPSS 0.22%Mar 26, 2026
- High8.1Fireshare facilitates self-hosted media and link sharing.Check if you run itEPSS 0.44%Mar 26, 2026
- Low2.3Lychee is a free, open-source photo-management tool.Check if you run itEPSS 0.24%Mar 26, 2026
- Critical9.1Outline is a service that allows for collaborative documentation.Check if you run itEPSS 0.48%Mar 26, 2026
- Medium5.3Ech0 is an open-source, self-hosted publishing platform for personal idea sharing.Check if you run itEPSS 0.50%Mar 26, 2026
- Medium4.3iCalendar is a Ruby library for dealing with iCalendar files in the iCalendar format defined by RFC-5545.Check if you run itEPSS 0.25%Mar 26, 2026
- Medium5.4Invoice Ninja is a source-available invoice, quote, project and time-tracking app built with Laravel.Check if you run itEPSS 0.24%Mar 26, 2026
- High7.2PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser.Check if you run itEPSS 3.02%Mar 26, 2026
- Medium6.1PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser.Check if you run itEPSS 0.53%Mar 26, 2026
- Medium6.5PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser.Check if you run itEPSS 0.32%Mar 26, 2026
- Medium4.3PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser.Check if you run itEPSS 0.28%Mar 26, 2026
- Medium5.5PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser.Check if you run itEPSS 0.26%Mar 26, 2026
- Medium6.5MobSF is a mobile application security testing tool used.Check if you run itEPSS 0.29%Mar 26, 2026
- Medium6.5TSPortal is the WikiTide Foundation’s in-house platform used by the Trust and Safety team to manage reports, investigations, appeals, and transparency work.Check if you run itEPSS 0.30%Mar 26, 2026
- Medium5.3Lychee is a free, open-source photo-management tool.Check if you run itEPSS 0.27%Mar 26, 2026
- Medium6.5The Grafana MSSQL data source plugin contains a logic flaw that allows a low-privileged user (Viewer) to bypass API restrictions and trigger a catastrophic Out-Of-Memo…Check if you run itEPSS 0.45%Mar 26, 2026
Sort