Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.3SocialEngine versions 7.8.0 and prior contain a blind server-side request forgery vulnerability in the /core/link/preview endpoint where user-supplied input passed via…Check if you run itEPSS 0.46%Apr 23, 2026
- Medium4.7An API design flaw in WebKitGTK and WPE WebKit allows untrusted web content to unexpectedly perform IP connections, DNS lookups, and HTTP requests.Check if you run itEPSS 0.23%Apr 23, 2026
- High8.7The LabOne Web Server, backing the LabOne User Interface, contains insufficient input validation in its file access functionality.Check if you run itEPSS 0.31%Apr 23, 2026
- Critical9.1Froxlor is open source server administration software.Check if you run itEPSS 0.69%Apr 23, 2026
- Critical9.9Froxlor is open source server administration software.Check if you run itEPSS 0.75%Apr 23, 2026
- High8.5STIG Manager is an API and web client for managing Security Technical Implementation Guides (STIG) assessments of Information Systems.Check if you run itEPSS 0.62%Apr 23, 2026
- High7.5PsiTransfer is an open source, self-hosted file sharing solution.Check if you run itEPSS 0.46%Apr 23, 2026
- Medium4.9IBM Guardium Data Protection 12.1 could allow an administrative user to traverse directories on the system.Check if you run itEPSS 0.42%Apr 23, 2026
- Critical9.2Rclone is a command-line program to sync files and directories to and from different cloud storage providers.Check if you run itEPSS 5.30%Apr 23, 2026
- Medium6.3WeKan before 8.35 contains a server-side request forgery vulnerability in webhook integration URL handling where the URL scheme field accepts any string without protoc…Check if you run itEPSS 0.39%Apr 22, 2026
- Medium5.5Squidex is an open source headless content management system and content management hub.Check if you run itEPSS 0.43%Apr 22, 2026
- High7.3Squidex is an open source headless content management system and content management hub.Check if you run itEPSS 0.36%Apr 22, 2026
- Critical9.1Jellystat is a free and open source Statistics App for Jellyfin.Check if you run itEPSS 0.93%Apr 22, 2026
- Medium6.9Xerte Online Toolkits versions 3.15 and earlier contain an information disclosure vulnerability that allows unauthenticated attackers to retrieve the full server-side…Check if you run itEPSS 1.11%Apr 22, 2026
- High8.8Xerte Online Toolkits versions 3.15 and earlier contain a missing authentication vulnerability in the elFinder connector endpoint at /editor/elfinder/php/connector.php…Check if you run itEPSS 3.07%Apr 22, 2026
- Medium5.5An argument parsing error in the kill utility of uutils coreutils incorrectly interprets kill -1 as a request to send the default signal (SIGTERM) to PID -1.Check if you run itEPSS 0.15%Apr 22, 2026
- Low3.3The mkdir utility in uutils coreutils incorrectly applies permissions when using the -m flag by creating a directory with umask-derived permissions (typically 0755) be…Check if you run itEPSS 0.12%Apr 22, 2026
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in ThemeFusion Avada allows Cross Site Request Forgery.This issue affects Avada: from n/a before 7.13.2.Check if you run itEPSS 0.10%Apr 22, 2026
- Critical9.3ThinkPHP ThinkPHP Authorization Bypass Through User-Controlled KeyPatch nowKEVEPSS 0.89%Apr 22, 2026
- High7.5A rogue primary server may cause file descriptor exhaustion and eventually a denial of service, when a PowerDNS secondary server forwards a DNS update request to it.Check if you run itEPSS 0.73%Apr 22, 2026
- Critical9.8An attacker can send a notify request that causes a new secondary domain to be added to the bind backend, but causes said backend to update its configuration to an inv…Check if you run itEPSS 0.59%Apr 22, 2026
- High8.1A rogue backend can send a crafted SVCB response to a Discovery of Designated Resolvers request, when requested via either the autoUpgrade (Lua) option to newServer or…Check if you run itEPSS 0.80%Apr 22, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: xfrm: prevent policy_hthresh.work from racing with netns teardown A XFRM_MSG_NEWSPDINFO request can…Check if you run itEPSS 0.14%Apr 22, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: af_key: validate families in pfkey_send_migrate() syzbot was able to trigger a crash in skb_put() […Check if you run itEPSS 0.17%Apr 22, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: erofs: set fileio bio failed in short read case For file-backed mount, IO requests are handled by v…Check if you run itEPSS 0.16%Apr 22, 2026