Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9Tink-go 2.8.0 Keyset Validation Bypass via NewHandleWithNoSecretsCheck if you run itEPSS 0.19%Oct 12, 2026
- High7.8containerd CRI plugin: Checkpoint restore bypasses destination security contextCheck if you run itEPSS 0.11%Oct 12, 2026
- High7.4A flaw was found in openstack-network-exporter.Check if you run itEPSS 0.28%Oct 12, 2026
- Critical9.8PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.33%Oct 12, 2026
- Low2.1A flaw has been found in KusalkaSilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2.Check if you run itEPSS 0.27%Oct 12, 2026
- Low2.1A security vulnerability has been detected in SourceCodester Drug Recommendation System 1.0.Check if you run itEPSS 0.26%Oct 12, 2026
- Medium5.3copyparty FTP: upload outside defined volumes (limited path traversal)Check if you run itEPSS 0.31%Oct 12, 2026
- Critical9.3A vulnerability was identified in Edimax BR-6208AC 1.32.Check if you run itEPSS 2.03%Oct 12, 2026
- Medium5.5A vulnerability was found in Edimax BR-6208AC 1.32.Check if you run itEPSS 1.66%Oct 12, 2026
- High7.4Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not consistently validate TLS certificate hostnames for certain outbound connections.Check if you run itEPSS 0.14%Oct 12, 2026
- High7.4Progress MarkLogic Server 12.x releases before 12.1.0 may use cleartext transport for certain cluster-management communications.Check if you run itEPSS 0.14%Oct 12, 2026
- High7.4Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently verify the identity of a Kerberos authentication service in c…Check if you run itEPSS 0.25%Oct 12, 2026
- High7.1Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 assign overly permissive operating-system permissions to certain log files, which…Check if you run itEPSS 0.10%Oct 12, 2026
- High7.7Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently restrict access to certain security-sensitive information.Check if you run itEPSS 0.30%Oct 12, 2026
- High8.0Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain memory-safety defects in the JavaScript engine integration that could res…Check if you run itEPSS 0.24%Oct 12, 2026
- High7.5Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an improper authentication vulnerability in SAML processing.Check if you run itEPSS 0.25%Oct 12, 2026
- High7.5On Azure deployments, Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record security-sensitive authentication information in…Check if you run itEPSS 0.40%Oct 12, 2026
- High7.5Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authentication validation weakness that could allow an attacker to use…Check if you run itEPSS 0.29%Oct 12, 2026
- High8.5Admidio 4.3.2 through 4.3.17 and 5.0.0 before 5.0.15 contains a broken access control vulnerability that allows role administrators to assign users to roles in other organizations.Check if you run itEPSS 0.29%Oct 12, 2026
- Medium5.3Admidio 5.0.0 before 5.0.15 contains an unauthenticated stored cross-site scripting vulnerability in RegistrationPresenter.php, which inserts the raw FIRST_NAME regist…Check if you run itEPSS 0.20%Oct 12, 2026
- High8.7Grav before 2.1.7 contains an information disclosure vulnerability because bundled nginx, lighttpd, IIS, and Caddy 2 configurations block .git only at document root.Open the advisoryOct 12, 2026
- Medium6.9Grav Star Ratings 2.0.1 through 2.0.3 contains a missing authorization vulnerability that allows unauthenticated visitors to vote by bypassing client-only vote_access…Check if you run itEPSS 0.26%Oct 12, 2026
- Medium5.3Grav Guestbook plugin 0.5.0 and 0.5.1 contains missing authorization and cross-site request forgery vulnerabilities in Admin moderation actions delete, approve, and approveAll.Check if you run itEPSS 0.20%Oct 12, 2026
- High8.7Grav Git Sync 1.0.2 through 3.4.12 contains a command injection vulnerability that allows authenticated content editors to execute OS commands by injecting shell subst…Check if you run itEPSS 1.22%Oct 12, 2026
- Medium6.9Grav Data Manager plugin 1.4.0 through 1.4.5 contains a missing authorization vulnerability that allows unauthenticated attackers to delete stored data files via the c…Check if you run itEPSS 0.27%Oct 12, 2026