Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownCVE-2025-14470Open the advisoryJan 12, 2026
- Critical9.1mindsdb mindsdb Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 20.26%Jan 12, 2026
- High8.1Apache Struts Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 50.42%Jan 11, 2026
- Medium6.9Sangfor operation_and_maintenance_security_management_system Improper Access ControlPatch nowKEVEPSS 2.04%Jan 10, 2026
- High8.8Authlib is a Python library which builds OAuth and OpenID Connect servers.Check if you run itEPSS 0.27%Jan 8, 2026
- Medium6.1Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation MediaWiki - UploadWizard extension al…Check if you run itEPSS 0.24%Jan 8, 2026
- Medium6.6CoreDNS is a DNS server that chains plugins.Check if you run itEPSS 0.49%Jan 8, 2026
- High8.6A flaw was identified in the NTLM authentication handling of the libsoup HTTP library, used by GNOME and other applications for network communication.Check if you run itEPSS 0.61%Jan 8, 2026
- Low3.1When doing SSH-based transfers using either SCP or SFTP, and asked to do public key authentication, curl would wrongly still ask and authenticate using a locally running SSH agent.Check if you run itEPSS 0.48%Jan 8, 2026
- Medium5.3When doing SSH-based transfers using either SCP or SFTP, and setting the known_hosts file, libcurl could still mistakenly accept connecting to hosts *not present* in the specifiedCheck if you run itEPSS 0.55%Jan 8, 2026
- Medium5.3When doing TLS related transfers with reused easy or multi handles and altering the option, libcurl could accidentally reuse a CA store cached in memory for which the partial chainCheck if you run itEPSS 0.76%Jan 8, 2026
- Medium5.3Missing Authorization vulnerability in G5Theme Zorka zorka allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Zorka: from n/a through <= 1.5Check if you run itEPSS 0.25%Jan 8, 2026
- Medium4.3Missing Authorization vulnerability in Campaign Monitor Campaign Monitor for WordPress allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.22%Jan 8, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pinpoll Pinpoll pinpoll allows Reflected XSS.This issue affects Pinpoll: fromCheck if you run itEPSS 0.22%Jan 8, 2026
- Medium5.1A vulnerability was identified in code-projects Intern Membership Management System 1.0.Check if you run itEPSS 0.37%Jan 8, 2026
- Medium6.9A vulnerability was determined in code-projects Intern Membership Management System 1.0.Check if you run itEPSS 0.44%Jan 8, 2026
- Medium5.1A vulnerability was found in code-projects Intern Membership Management System 1.0.Check if you run itEPSS 0.36%Jan 8, 2026
- Medium5.1A vulnerability has been found in code-projects Intern Membership Management System 1.0.Check if you run itEPSS 0.40%Jan 8, 2026
- Medium5.1A flaw has been found in code-projects Intern Membership Management System 1.0.Check if you run itEPSS 0.36%Jan 8, 2026
- Medium5.3A flaw was found in Keycloak.Check if you run itEPSS 0.40%Jan 8, 2026
- Medium5.3axllent mailpit Server-Side Request Forgery (SSRF)Patch nowKEVEPSS 0.81%Jan 8, 2026
- Critical10.0n8n n8n Improper Input ValidationPatch nowKEVEPSS 78.19%Jan 8, 2026
- High7.8pnpm is a package manager.Check if you run itEPSS 1.04%Jan 7, 2026
- High8.8pnpm is a package manager.Check if you run itEPSS 0.47%Jan 7, 2026
- Critical9.8pnpm is a package manager.Check if you run itEPSS 1.01%Jan 7, 2026
Sort