Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Textpattern CMS 4.9.0 contains a Broken Access Control vulnerability in the article management system that allows authenticated users with low privileges to modify art…Check if you run itEPSS 0.25%Apr 21, 2026
- Low3.3October is a Content Management System (CMS) and web platform.Check if you run itEPSS 0.14%Apr 21, 2026
- Low3.1October is a Content Management System (CMS) and web platform.Check if you run itEPSS 0.14%Apr 21, 2026
- Medium6.6October is a Content Management System (CMS) and web platform.Check if you run itEPSS 0.23%Apr 21, 2026
- Medium4.9October is a Content Management System (CMS) and web platform.Check if you run itEPSS 0.25%Apr 21, 2026
- Medium6.5Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines.Check if you run itEPSS 0.26%Apr 21, 2026
- High8.2NVIDIA CUDA-Q contains a vulnerability in an endpoint, where an unauthenticated attacker could cause an out-of-bounds read by sending a maliciously crafted request.Check if you run itEPSS 0.32%Apr 21, 2026
- High7.7NVIDIA KAI Scheduler contains a vulnerability where an attacker could access API endpoints without authorization.Check if you run itEPSS 0.24%Apr 21, 2026
- Medium4.3NVIDIA KAI Scheduler contains a vulnerability where an attacker could cause improper authorization through cross-namespace pod references.Check if you run itEPSS 0.19%Apr 21, 2026
- Critical9.4This Critical severity OS Command Injection vulnerability was introduced in versions 9.6.0, 10.0.0, 10.1.0, 10.2.0, 11.0.0, 11.1.0, 12.0.0, and 12.1.0 of Bamboo Data Center.Check if you run itEPSS 1.34%Apr 21, 2026
- Medium6.1FreeScout is a free self-hosted help desk and shared mailbox.Check if you run itEPSS 0.20%Apr 21, 2026
- High8.9FreeScout is a free self-hosted help desk and shared mailbox.Check if you run itEPSS 0.57%Apr 21, 2026
- High7.2Visitor Management System 1.0 by sanjay1313 is vulnerable to Unrestricted File Upload in vms/php/admin_user_insert.php and vms/php/update_1.php.Check if you run itEPSS 0.81%Apr 21, 2026
- Critical9.3SQL injection vulnerability in Zeon Academy Pro by Zeon Global Tech.Check if you run itEPSS 0.24%Apr 21, 2026
- Medium5.1HTML injection vulnerability in PHP Point of Sale v19.4.Check if you run itEPSS 0.16%Apr 21, 2026
- Critical10.0Net::Dropbear versions before 0.14 for Perl contains a vulnerable version of libtomcrypt.Check if you run itEPSS 0.57%Apr 21, 2026
- Critical10.0Storable versions before 3.05 for Perl has a stack overflow.Check if you run itEPSS 0.64%Apr 21, 2026
- High8.5Vulnerability related to an unquoted search path in CivetWeb v1.16.Check if you run itEPSS 0.14%Apr 21, 2026
- High8.8The method "sock_recvfrom_into()" of "asyncio.ProacterEventLoop" (Windows only) was missing a boundary check for the data buffer when using nbytes parameter.Check if you run itEPSS 0.39%Apr 21, 2026
- High8.8In the Website module of Dolibarr ERP & CRM 22.0.4 and below, the application uses blacklist-based filtering to restrict dangerous PHP functions related to system comm…Check if you run itEPSS 0.57%Apr 21, 2026
- High8.8In Dolibarr ERP & CRM <= 22.0.4, PHP code detection and editing permission enforcement in the Website module is not applied consistently to all input parameters, allow…Check if you run itEPSS 0.27%Apr 21, 2026
- Medium6.3Dovestones Softwares AD Self Update <4.0.0.5 is vulnerable to Cross Site Request Forgery (CSRF).Check if you run itEPSS 0.10%Apr 21, 2026
- Medium6.1Dovestones Softwares ADPhonebook <4.0.1.1 has a reflected cross-site scripting (XSS) vulnerability in the search parameter of the /ADPhonebook?Department=HR endpoint.Check if you run itEPSS 0.19%Apr 21, 2026
- Medium5.3XiangShan (open-source high-performance RISC-V processor) commit edb1dfaf7d290ae99724594507dc46c2c2125384 (2024-11-28) has improper gating of its distributed CSR write…Check if you run itEPSS 0.10%Apr 21, 2026
- Medium6.5User‑Controlled HTTP Header in Fortra's GoAnywhere MFT prior to version 7.10.0 allows attackers to trigger a DNS lookup, as well as DNS Rebinding and Information Disclosure.Check if you run itEPSS 0.23%Apr 21, 2026
Sort