Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.6Froxlor is open source server administration software.Check if you run itEPSS 0.56%Mar 24, 2026
- Critical9.3A Missing Authentication for Critical Function vulnerability in Pharos Controls Mosaic Show Controller firmware version 2.15.3 could allow an unauthenticated attacker…Check if you run itEPSS 0.60%Mar 24, 2026
- High7.5Astro is a web framework.Check if you run itEPSS 0.39%Mar 24, 2026
- Medium6.1Zabbix Agent 2 Docker plugin does not properly sanitize the 'docker.container_info' parameters when forwarding them to the Docker daemon.Check if you run itEPSS 0.24%Mar 24, 2026
- Medium6.9An unauthenticated attacker can exploit the Frontend 'validate' action to blindly instantiate arbitrary PHP classes.Check if you run itEPSS 0.28%Mar 24, 2026
- High8.7A low privilege Zabbix user with API access can exploit a blind SQL injection vulnerability in include/classes/api/CApiService.php to execute arbitrary SQL selects via…Check if you run itEPSS 4.10%Mar 24, 2026
- High7.7Host and event action script input is validated with a regex (set by the administrator), but the validation runs in multiline mode.Check if you run itEPSS 0.31%Mar 24, 2026
- High7.1For performance reasons Zabbix Server/Proxy reuses JavaScript (Duktape) contexts (used in script items, JavaScript reprocessing, Webhooks).Check if you run itEPSS 0.26%Mar 24, 2026
- High7.8In versions before 7.0.0.64, IDrive’s id_service.exe process runs with elevated privileges and regularly reads from several files under the C:\ProgramData\IDrive\ directory.Check if you run itEPSS 0.18%Mar 24, 2026
- High8.3Wallos is an open-source, self-hostable personal subscription tracker.Check if you run itEPSS 0.38%Mar 24, 2026
- High7.1Wallos is an open-source, self-hostable personal subscription tracker.Check if you run itEPSS 0.29%Mar 24, 2026
- Medium5.4Wallos is an open-source, self-hostable personal subscription tracker.Check if you run itEPSS 0.20%Mar 24, 2026
- High7.7Wallos is an open-source, self-hostable personal subscription tracker.Check if you run itEPSS 0.29%Mar 24, 2026
- Medium4.9Craft CMS is a content management system (CMS).Check if you run itEPSS 0.29%Mar 24, 2026
- Low1.3Craft CMS is a content management system (CMS).Check if you run itEPSS 0.22%Mar 24, 2026
- Low2.7Craft CMS is a content management system (CMS).Check if you run itEPSS 0.36%Mar 24, 2026
- Medium6.9Craft CMS is a content management system (CMS).Check if you run itEPSS 0.38%Mar 24, 2026
- Medium4.9Craft CMS is a content management system (CMS).Check if you run itEPSS 0.36%Mar 24, 2026
- High8.6Craft CMS is a content management system (CMS).Check if you run itEPSS 1.11%Mar 24, 2026
- Medium6.3LibVNCServer versions 0.9.15 and prior (fixed in commit dc78dee) contain null pointer dereference vulnerabilities in the HTTP proxy handlers within httpProcessInput()…Check if you run itEPSS 5.42%Mar 24, 2026
- Medium6.9LibVNCServer versions 0.9.15 and prior (fixed in commit 009008e) contain a heap out-of-bounds read vulnerability in the UltraZip encoding handler that allows a malicio…Check if you run itEPSS 0.45%Mar 24, 2026
- Critical9.1LoLLMs WEBUI provides the Web user interface for Lord of Large Language and Multi modal Systems.Check this weekEPSS 21.63%Mar 24, 2026
- Low2.1Vulnerable endpoints accept user-controlled input through a URL in JSON format which enables command execution.Check if you run itEPSS 0.42%Mar 24, 2026
- Medium6.9Vikunja is an open-source self-hosted task management platform.Check if you run itEPSS 0.26%Mar 24, 2026
- Medium6.5Vikunja is an open-source self-hosted task management platform.Check if you run itEPSS 0.40%Mar 24, 2026
Sort