Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command Injection via Network Report.Check if you run itEPSS 0.95%Apr 13, 2026
- High8.6Unrestricted Upload of File with Dangerous Type vulnerability allows Remote Code Execution via file upload.Check if you run itEPSS 0.44%Apr 13, 2026
- Medium5.3The bson_validate function may return early on specific inputs and incorrectly report success.Check if you run itEPSS 0.19%Apr 13, 2026
- Medium6.9A vulnerability was detected in SourceCodester Pharmacy Sales and Inventory System 1.0.Check if you run itEPSS 0.26%Apr 13, 2026
- Medium5.5A vulnerability was identified in code-projects Simple Content Management System 1.0.Check if you run itEPSS 0.32%Apr 13, 2026
- Low2.7Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in the file /orms/admin/activities/manage_activity.php.Check if you run itEPSS 0.19%Apr 13, 2026
- Critical9.8In Totara LMS v19.1.5 and before, the forgot password API does not implement rate limiting for the target email address.Check if you run itEPSS 0.40%Apr 13, 2026
- Critical9.8Totara LMS v19.1.5 and before is vulnerable to Incorrect Access Control.Check if you run itEPSS 0.40%Apr 13, 2026
- High8.0Totara LMS v19.1.5 and before is vulnerable to HTML Injection.Check if you run itEPSS 0.31%Apr 13, 2026
- Medium5.3Prometheus is an open-source monitoring system and time series database.Check if you run itEPSS 0.32%Apr 13, 2026
- Medium4.8A weakness has been identified in code-projects Simple Content Management System 1.0.Check if you run itEPSS 0.31%Apr 13, 2026
- High7.8A vulnerability in the class of the package, version 3.13.0, allows attacker-controlled TensorFlow SavedModels to be loaded during deserialization of models, even when .Check if you run itEPSS 0.42%Apr 13, 2026
- Medium6.9A security flaw has been discovered in code-projects Simple Content Management System 1.0.Check if you run itEPSS 0.32%Apr 13, 2026
- High8.8Dag Authors, who normally should not be able to execute code in the webserver context could craft XCom payload causing the webserver to execute arbitrary code.Check if you run itEPSS 0.60%Apr 13, 2026
- High7.5Before Airflow 3.2.0, it was unclear that secure Airflow deployments require the Deployment Manager to take appropriate actions and pay attention to security details and security mCheck if you run itEPSS 0.45%Apr 13, 2026
- Low2.7Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL injection in the file /rsms/admin/inquiries/view_details.php.Check if you run itEPSS 0.29%Apr 13, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD __build_packet_message() manually consCheck if you run itEPSS 0.14%Apr 13, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp process_sdp() declares union nf_inCheck if you run itEPSS 0.13%Apr 13, 2026
- High7.0In the Linux kernel, the following vulnerability has been resolved: ACPI: EC: clean up handlers on probe failure in acpi_ec_setup() When ec_install_handlers() returns -EPROBE_DEFERCheck if you run itEPSS 0.15%Apr 13, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: rds: ib: reject FRMR registration before IB connection is established rds_ib_get_mr() extracts the rds_ib_connecCheck if you run itEPSS 0.12%Apr 13, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP Weiming Shi says: xt_matCheck if you run itEPSS 0.13%Apr 13, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() m2sm() converts a u32 slope to a u64 scaled value.Check if you run itEPSS 0.13%Apr 13, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_flow: fix NULL pointer dereference on shared blocks flow_change() calls tcf_block_q() and dereferCheck if you run itEPSS 0.13%Apr 13, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_fw: fix NULL pointer dereference on shared blocks The old-method path in fw_classify() calls tcf_Check if you run itEPSS 0.13%Apr 13, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: bridge: mrp: reject zero test interval to avoid OOM panic br_mrp_start_test() and br_mrp_start_in_test() acceptCheck if you run itEPSS 0.10%Apr 13, 2026
Sort