Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.7Powerlevel10k through 1.20.0 contains an insecure download vulnerability in the gitstatus/install script that disables TLS certificate verification with curl -k and sk…Check if you run itEPSS 0.12%Oct 13, 2026
- Medium5.3Jorani before 1.0.4 contains an insecure direct object reference vulnerability that allows authenticated users to modify, delete, and view other employees' requests by…Check if you run itEPSS 0.24%Oct 13, 2026
- High8.6Ikaros 1.2.0 through 1.2.5 contains an authentication bypass vulnerability that allows attackers with a valid password to skip TOTP verification by reusing the login temp token.Check if you run itEPSS 0.43%Oct 13, 2026
- Low2.1A vulnerability has been found in GPAC up to 26.07.0.Check if you run itEPSS 0.29%Oct 13, 2026
- Critical9.9An External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to redirect application-generat…Check if you run itEPSS 0.79%Oct 13, 2026
- Medium6.1The unstructured library provides open-source components for ingesting and pre-processing images and text documents, such as PDFs, HTML, Word docs, and many more.Check if you run itEPSS 0.19%Oct 13, 2026
- Critical9.3TanStack Router is a client-first, server-capable, fully type-safe router and full-stack framework for the web.Check if you run itEPSS 0.52%Oct 13, 2026
- High7.5Dio: Cross-origin redirect leaks sensitive request headers inCheck if you run itEPSS 0.36%Oct 13, 2026
- High7.1An integer underflow in OpenVPN version 2.7_alpha3 through 2.7.7 on Windows and Android allows remote authenticated servers to cause a denial of service or memory disc…Check if you run itEPSS 0.47%Oct 13, 2026
- Medium6.5ESF-IDF is the Espressif Internet of Things (IOT) Development Framework.Check if you run itEPSS 0.26%Oct 13, 2026
- Medium5.5For XSA-308 logic was introduced, as VMX VMEntry checks do not like the exact combination of state which occurs when #DB in intercepted, Single Stepping is active, and…Check if you run itEPSS 0.17%Oct 13, 2026
- High8.8XSA-501 was about issues with v1 -> v2 and v2 -> v1 changes racing certain other grant table operations.Check if you run itEPSS 0.18%Oct 13, 2026
- Critical9.8The workaround for XSA-433 (Zenbleed, CVE-2023-20593) was later re-worked to better integrate with other manipulations of the same MSR.Check if you run itEPSS 0.16%Oct 13, 2026
- Medium5.5A vulnerability was determined in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5.Check if you run itEPSS 0.51%Oct 13, 2026
- Medium5.3Plane is an open-source project management tool.Check if you run itEPSS 0.24%Oct 13, 2026
- High7.5[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] 1) XSA-437 (CVE-2023-34321) addressed…Check if you run itEPSS 0.15%Oct 13, 2026
- Medium4.7With its original introduction, GNTTAB_cache_flush was made available uniformly.Check if you run itEPSS 0.18%Oct 13, 2026
- High7.5[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] 1) XSA-437 (CVE-2023-34321) addressed…Check if you run itEPSS 0.15%Oct 13, 2026
- Medium6.9Axios is a promise-based HTTP client for the browser and Node.js.Check if you run itEPSS 0.53%Oct 13, 2026
- Medium6.1ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the PageTitle/Notes parameter in the Notes.aspx endpoint.Check if you run itEPSS 0.19%Oct 13, 2026
- Critical9.8ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an incorrect access control issue in sensitive API endpoints.Check if you run itEPSS 0.35%Oct 13, 2026
- High8.8Leantime: Any Authenticated User Can Self-Escalate to Admin via Unauthorized JSON-RPC MethodsCheck if you run itEPSS 0.33%Oct 13, 2026
- High7.1Collection validators using collation-accepting expressions can crash MongoDB Server on insertCheck if you run itEPSS 0.24%Oct 13, 2026
- Critical9.9Legacy Update is a tool for activating and installing updates on legacy Windows PCs.Check if you run itEPSS 0.21%Oct 13, 2026
- Medium4.2JupyterLab: Command link trust prompt in JupyterLab can trust a document other than the one clickedCheck if you run itEPSS 0.14%Oct 13, 2026