Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Text::CSV_XS versions before 1.65 for Perl read before the start of an all-blank field under allow_whitespace in strip_trail_whitespaceCheck if you run itEPSS 0.19%Oct 16, 2026
- Critical9.8Text::CSV_XS versions before 1.65 for Perl allow record splitting by writing strings used as numbers without quotes in combineCheck if you run itEPSS 0.19%Oct 16, 2026
- Critical9.8Text::CSV_XS versions before 1.65 for Perl drop the end of a record and its line ending when a UTF-8 flagged field precedes invalid UTF-8 bytes in printCheck if you run itEPSS 0.19%Oct 16, 2026
- High7.5Text::CSV_XS versions before 1.65 for Perl allow quadratic CPU use by copying the unparsed remainder per record of CR-only input in getlineCheck if you run itEPSS 0.19%Oct 16, 2026
- Medium6.5Text::CSV_XS versions before 1.65 for Perl leak the parsed fields of a record that fails to parse in getline.Check if you run itEPSS 0.19%Oct 16, 2026
- Critical9.8Text::CSV_XS versions from 1.46 before 1.65 for Perl have a use-after-free of bind_columns variables when skip_empty_rows skips an empty line in getline.Check if you run itEPSS 0.19%Oct 16, 2026
- High7.5Text::CSV_XS versions before 1.65 for Perl allow memory exhaustion by allocating one entry per index of an RFC 7111 selector in fragment.Check if you run itEPSS 0.19%Oct 16, 2026
- Low3.6A flaw was found in libarchive.Check if you run itEPSS 0.11%Oct 16, 2026
- Medium6.5Frappe HR is an open-source human resources management solution (HRMS).Open the advisoryOct 16, 2026
- Medium6.5ERPNext is a free and open source Enterprise Resource Planning tool.Open the advisoryOct 16, 2026
- High7.5StreamReadConstraints.maxNameLength (default 50,000 characters) is intended to bound how much memory a single JSON Object property name can consume while being parsed,…Check if you run itEPSS 0.91%Oct 16, 2026
- High7.5Exposure of SQL Black List to an Unauthorized Actor vulnerability in Apache Kylin.Open the advisoryOct 16, 2026
- High7.5Exposure of unauthorized cross-project job manipulation vulnerability in Apache Kylin.Open the advisoryOct 16, 2026
- High7.5Exposure of Job Discard to an Unauthorized Actor vulnerability in Apache Kylin.Open the advisoryOct 16, 2026
- High7.5Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Kylin.Open the advisoryOct 16, 2026
- High7.7Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists.Open the advisoryOct 16, 2026
- High8.8Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Kylin.Open the advisoryOct 16, 2026
- Critical9.8Authentication bypass within in-house network in Apache Kylin.Open the advisoryOct 16, 2026
- Medium5.4weForms <= 1.6.28 - Unauthenticated Limited Media File Deletion via 'wpuf_files' ParameterCheck if you run itEPSS 0.28%Oct 16, 2026
- High7.2European VAT Compliance Assistant for WooCommerce <= 1.36.10 - Unauthenticated Stored Cross-Site Scripting via CF-IPCountry HeaderCheck if you run itEPSS 0.27%Oct 16, 2026
- High7.2Payment forms, Buy now buttons, and Invoicing System | GetPaid <= 2.8.61 - Unauthenticated Stored Cross-Site Scripting via 'mmdwqzpoxadd' ParameterCheck if you run itEPSS 0.28%Oct 16, 2026
- Medium6.4YMC Filter <= 3.12.19 - Authenticated (Author+) Stored DOM-Based Cross-Site Scripting via 'post_title' ParameterCheck if you run itEPSS 0.21%Oct 16, 2026
- Critical9.8Improper Authentication vulnerability in Apache Kylin.Check this weekEPSS 25.00%Oct 16, 2026
- Medium5.4IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to obtain sensitive information due to missing subtree checks during file handle resolution.Open the advisoryOct 16, 2026
- High7.8IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to an authenticated attacker elevating their privilege.Open the advisoryOct 16, 2026