Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1An out-of-bounds read vulnerability exists in the function of .Check if you run itEPSS 0.14%Apr 9, 2026
- High7.5A memory exhaustion vulnerability exists in the HTTP server due to unbounded use of the header.Check if you run itEPSS 0.59%Apr 9, 2026
- High7.5A memory exhaustion vulnerability exists in ZIP archive processing.Check if you run itEPSS 0.43%Apr 9, 2026
- High7.5A gzip decompression bomb vulnerability exists when Orthanc processes HTTP request with .Check if you run itEPSS 0.49%Apr 9, 2026
- High7.5An out-of-bounds read vulnerability exists in during DICOM meta-header parsing.Check if you run itEPSS 0.65%Apr 9, 2026
- Medium6.6Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN admin to bypass AMC TOTP authentication.Check if you run itEPSS 0.61%Apr 9, 2026
- High7.2Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall SMA1000 series appliances allows a remote authenticated attacker with…Check if you run itEPSS 0.64%Apr 9, 2026
- Medium4.4LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files.Check if you run itEPSS 0.20%Apr 9, 2026
- Medium4.3Cross Site Request Forgery vulnerability in Phpbb phbb3 v.3.3.15 allows a local attacker to execute arbitrary code via the Admin Control Panel icon management functionality.Check if you run itEPSS 0.15%Apr 9, 2026
- High8.8Cross Site Request Forgery vulnerability in Phpbb phbb3 v.3.3.15 allows a local attacker to execute arbitrary code via the login function and the authentication mechanismCheck if you run itEPSS 0.26%Apr 9, 2026
- Critical9.1Jizhicms v2.5.4 is vulnerable to Server-Side Request Forgery (SSRF) in User Evaluation, Message, and Comment modules.Check if you run itEPSS 0.29%Apr 9, 2026
- Medium5.3A weakness has been identified in code-projects Patient Record Management System 1.0.Check if you run itEPSS 0.27%Apr 9, 2026
- High8.4Helm is a package manager for Charts for Kubernetes.Check if you run itEPSS 0.22%Apr 9, 2026
- Low2.7In Ubuntu, Subiquity version 24.04.4 could leak sensitive user credentials during crash reporting.Check if you run itEPSS 0.29%Apr 9, 2026
- High8.4Helm is a package manager for Charts for Kubernetes.Check if you run itEPSS 0.21%Apr 9, 2026
- Low2.7In Ubuntu, ubuntu-desktop-provision version 24.04.4 could leak sensitive user credentials during crash reporting.Check if you run itEPSS 0.32%Apr 9, 2026
- Medium6.5fast-jwt provides fast JSON Web Token (JWT) implementation.Check if you run itEPSS 0.27%Apr 9, 2026
- Medium5.3fast-jwt provides fast JSON Web Token (JWT) implementation.Check if you run itEPSS 0.40%Apr 9, 2026
- High7.0Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()Check if you run itEPSS 0.21%Apr 9, 2026
- High8.2OPNsense is a FreeBSD based firewall and routing platform.Check if you run itEPSS 0.42%Apr 9, 2026
- High7.0Axios is a promise based HTTP client for the browser and Node.js.Check if you run itEPSS 1.21%Apr 9, 2026
- High7.5A security flaw has been discovered in GL.iNet GL-RM1, GL-RM10, GL-RM10RC and GL-RM1PE 1.8.1.Check if you run itEPSS 0.52%Apr 9, 2026
- High7.2Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN user to bypass Workplace/Connect Tunnel TOTP authentication.Check if you run itEPSS 0.43%Apr 9, 2026
- High7.2An observable response discrepancy vulnerability in the SonicWall SMA1000 series appliances allows a remote attacker to enumerate SSL VPN user credentials.Check if you run itEPSS 0.37%Apr 9, 2026
- High7.5HashiCorp’s go-getter library up to v1.8.5 may allow arbitrary file reads on the file system during certain git operations through a maliciously crafted URL.Check if you run itEPSS 0.59%Apr 9, 2026
Sort