Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.8A vulnerability has been found in Rico só vantagem pra investir App up to 4.58.32.12421 on Android.Check if you run itEPSS 0.15%Apr 3, 2026
- High8.2An issue was discovered in Roundcube Webmail before 1.5.15 and 1.6.15.Check if you run itEPSS 0.41%Apr 3, 2026
- Medium5.3An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14.Check if you run itEPSS 0.38%Apr 3, 2026
- Medium5.3An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14.Check if you run itEPSS 0.42%Apr 3, 2026
- Medium5.3An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14.Check if you run itEPSS 0.42%Apr 3, 2026
- Medium4.2An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14.Check if you run itEPSS 0.25%Apr 3, 2026
- Medium6.5An issue was discovered in Roundcube Webmail 1.6.0 before 1.6.14.Check if you run itEPSS 0.40%Apr 3, 2026
- Medium6.1An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14.Check if you run itEPSS 0.26%Apr 3, 2026
- Low3.1An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14.Check if you run itEPSS 0.43%Apr 3, 2026
- High7.5An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14.Check if you run itEPSS 0.48%Apr 3, 2026
- Medium4.8A flaw has been found in UCC CampusConnect App up to 14.3.5 on Android.Check if you run itEPSS 0.15%Apr 3, 2026
- High7.2In Tornado before 6.5.5, cookie attribute injection could occur because the domain, path, and samesite arguments to .RequestHandler.set_cookie were not checked for crafted characteCheck if you run itEPSS 0.25%Apr 3, 2026
- High7.8In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to pCheck if you run itEPSS 0.18%Apr 3, 2026
- High7.5A remote attacker can supply a short X-Wing HPKE encapsulated key and trigger an out-of-bounds read in the C decapsulation path, potentially causing a crash or memory disclosure deCheck if you run itEPSS 0.49%Apr 3, 2026
- Medium6.1Shynet before 0.14.0 allows XSS in urldisplay and iconify template filters,Check if you run itEPSS 0.16%Apr 3, 2026
- Medium6.5Shynet before 0.14.0 allows Host header injection in the password reset flow.Check if you run itEPSS 0.10%Apr 3, 2026
- Critical9.6The Stackfield Desktop App before 1.10.2 for macOS and Windows contains a path traversal vulnerability in certain decryption functionality when processing the filePath property.Check if you run itEPSS 0.43%Apr 3, 2026
- High7.5An issue in Dokuwiki v.2025-05-14b "Librarian" [56.2] allows a remote attacker to cause a denial of service via the media_upload_xhr() function in the media.php fileCheck if you run itEPSS 0.46%Apr 3, 2026
- High8.3An issue was discovered in Biztalk360 before 11.5.Check if you run itEPSS 0.67%Apr 3, 2026
- High8.8An issue was discovered in Biztalk360 before 11.5.Check if you run itEPSS 0.47%Apr 3, 2026
- Medium6.8An issue was discovered in Biztalk360 through 11.5.Check if you run itEPSS 0.90%Apr 3, 2026
- Critical9.1Missing authentication for critical function in Azure MCP Server allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 0.86%Apr 2, 2026
- High8.6Improper authentication in Azure SRE Agent allows an unauthorized attacker to disclose information over a network.Check if you run itEPSS 0.92%Apr 2, 2026
- Critical10.0Improper authorization in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.73%Apr 2, 2026
- Critical9.6Server-side request forgery (ssrf) in Azure Custom Locations Resource Provider (RP) allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.61%Apr 2, 2026
Sort