Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.4The Elementor Website Builder – More Than Just a Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widget parameters in all versions up to,Check if you run itEPSS 0.35%Apr 8, 2026
- High8.8IBM Langflow Desktop 1.6.0 through 1.8.2 Langflow could allow an authenticated user to execute arbitrary code on the system, caused by an insecure default setting whic…Check if you run itEPSS 0.47%Apr 8, 2026
- High7.2IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.…Check if you run itEPSS 0.20%Apr 8, 2026
- High7.5Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denialCheck if you run itEPSS 0.36%Apr 8, 2026
- High7.5During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which caCheck if you run itEPSS 0.63%Apr 8, 2026
- Medium5.5tar.Reader can allocate an unbounded amount of memory when reading a maliciously-crafted archive containing a large number of sparse regions encoded in the "old GNU sparse map" forCheck if you run itEPSS 0.29%Apr 8, 2026
- High7.5If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources.Check if you run itEPSS 0.63%Apr 8, 2026
- Critical9.8Arithmetic over induction variables in loops were not correctly checked for underflow or overflow.Check if you run itEPSS 0.55%Apr 8, 2026
- Critical9.0SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass.Check if you run itEPSS 0.67%Apr 8, 2026
- High8.8When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraCheck if you run itEPSS 0.35%Apr 8, 2026
- Medium6.1Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used.Check if you run itEPSS 0.29%Apr 8, 2026
- High7.1The compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from making the correct determination about noCheck if you run itEPSS 0.27%Apr 8, 2026
- Medium6.4On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target of the symlink, even when the target liesCheck if you run itEPSS 0.30%Apr 8, 2026
- High8.4IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.37 stores sensitive information in log files that could be read by a local user.Check if you run itEPSS 0.12%Apr 8, 2026
- Medium5.4pyLoad is a free and open-source download manager written in Python.Check if you run itEPSS 0.23%Apr 8, 2026
- High8.7An out-of-bounds write issue in the virtio PCI transport in Firecracker 1.13.0 through 1.14.3 and 1.15.0 on x86_64 and aarch64 might allow a local guest user with root…Check if you run itEPSS 0.27%Apr 8, 2026
- Critical9.3IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0.2 and IBM SCheck if you run itEPSS 0.23%Apr 8, 2026
- High8.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.9.6 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an authenticatCheck if you run itEPSS 0.43%Apr 8, 2026
- Low2.7GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an authenticatedCheck if you run itEPSS 0.36%Apr 8, 2026
- Medium5.4GitLab has remediated an issue in GitLab EE affecting all versions from 18.2 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that, in customizable analytics dashboards,Check if you run itEPSS 0.29%Apr 8, 2026
- Critical9.8A vulnerability was identified in stata-mcp prior to v1.13.0 where insufficient validation of user-supplied Stata do-file content can lead to command execution.Check if you run itEPSS 0.57%Apr 8, 2026
- Critical9.1A Server-Side Request Forgery (SSRF) vulnerability exists in the Print Format functionality of ERPNext v16.0.1 and Frappe Framework v16.1.1, where user-supplied HTML is insufficienCheck if you run itEPSS 0.24%Apr 8, 2026
- High7.5OpenAirInterface v2.2.0 accepts Security Mode Complete without any integrity protection.Check if you run itEPSS 0.26%Apr 8, 2026
- High7.5OpenAirInterface Version 2.2.0 has a Buffer Overflow vulnerability in processing UplinkNASTransport containing Authentication Response containing a NAS PDU with oversize response (Check if you run itEPSS 0.40%Apr 8, 2026
- Medium4.3GitLab has remediated an issue in GitLab EE affecting all versions from 18.6 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that under certain circumstances could haveCheck if you run itEPSS 0.34%Apr 8, 2026
Sort