Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.8Docker Model Runner (DMR) is software used to manage, run, and deploy AI models using Docker.Check if you run itEPSS 0.26%Apr 1, 2026
- High8.1Tina is a headless content management system.Check if you run itEPSS 0.39%Apr 1, 2026
- Medium6.9OpenClaw before 2026.3.22 contains a path traversal vulnerability in Windows media loaders that accepts remote-host file URLs and UNC-style paths before local-path validation.Check if you run itEPSS 0.33%Apr 1, 2026
- High7.5A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0.Check if you run itEPSS 0.26%Apr 1, 2026
- Medium6.1A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Zoo Management System v1.0.Check if you run itEPSS 0.26%Apr 1, 2026
- Medium6.5A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to the lack of proper input validation.Check if you run itEPSS 0.31%Apr 1, 2026
- High8.4An arbitrary file overwrite vulnerability in Docudepot PDF Reader: PDF Viewer APP v1.0.34 allows attackers to overwrite critical internal files via the file import pro…Check if you run itEPSS 0.15%Apr 1, 2026
- High8.4An arbitrary file overwrite vulnerability in Ora Tools PDF Reader ' Reader & Editor APPv4.3.5 allows attackers to overwrite critical internal files via the file import…Check if you run itEPSS 0.15%Apr 1, 2026
- Medium6.4The King Addons for Elementor plugin for WordPress is vulnerable to multiple Contributor+ DOM-Based Stored Cross-Site Scripting vulnerabilities in all versions up to, and includingCheck if you run itEPSS 0.25%Apr 1, 2026
- Medium5.6pymanager included the current working directory in sys.path meaning modules could be shadowed by modules in the current working directory.Check if you run itEPSS 0.18%Apr 1, 2026
- High7.3A reflected cross-site scripting (XSS) vulnerability in the dashboard search functionality of the VertiGIS FM solution allows attackers to craft a malicious URL, that…Check if you run itEPSS 0.19%Apr 1, 2026
- Medium5.5A flaw was found in libinput.Check if you run itEPSS 0.15%Apr 1, 2026
- Medium6.5A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to improper server-side validation.Check if you run itEPSS 0.27%Apr 1, 2026
- High8.4An arbitrary file overwrite vulnerability in Tinybeans Private Family Album App v5.9.5-prod allows attackers to overwrite critical internal files via the file import p…Check if you run itEPSS 0.21%Apr 1, 2026
- High8.4An arbitrary file overwrite vulnerability in Deep Thought Industries ACE Scanner PDF Scanner v1.4.5 allows attackers to overwrite critical internal files via the file…Check if you run itEPSS 0.18%Apr 1, 2026
- High7.4A local file inclusion vulnerability in the upload/download flow of the VertiGIS FM application allows authenticated attackers to read arbitrary files from the server…Check if you run itEPSS 0.62%Apr 1, 2026
- High8.8A flaw was found in libinput.Check if you run itEPSS 0.18%Apr 1, 2026
- High8.6ByteDance DeerFlow versions prior to commit 92c7a20 contain a sandbox escape vulnerability in bash tool handling that allows attackers to execute arbitrary commands on the host sysCheck if you run itEPSS 0.41%Apr 1, 2026
- Medium6.9OpenViking versions 0.2.5 prior to 0.2.14 contain a missing authentication vulnerability in the bot proxy router that allows remote unauthenticated attackers to access protected boCheck if you run itEPSS 0.43%Apr 1, 2026
- High7.5A flaw was found in Corosync.Check if you run itEPSS 1.01%Apr 1, 2026
- High8.2A flaw was found in Corosync.Check if you run itEPSS 0.88%Apr 1, 2026
- High7.3Dell AppSync, version(s) 4.6.0, contain(s) an Incorrect Permission Assignment for Critical Resource vulnerability.Check if you run itEPSS 0.13%Apr 1, 2026
- High7.3Dell AppSync, version(s) 4.6.0, contain(s) an UNIX Symbolic Link (Symlink) Following vulnerability.Check if you run itEPSS 0.17%Apr 1, 2026
- Critical9.3metinfo metinfo Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 39.49%Apr 1, 2026
- Medium6.7A vulnerability was identified in MEPIS RM, an industrial software product developed by Metronik.Check if you run itEPSS 0.16%Apr 1, 2026
Sort