Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Twisted is an event-based framework for internet applications, supporting Python 3.6+.Check if you run itEPSS 0.43%May 13, 2026
- Medium4.8CubeCart is an ecommerce software solution.Check if you run itEPSS 0.17%May 13, 2026
- High7.2CubeCart is an ecommerce software solution.Check if you run itEPSS 0.31%May 13, 2026
- High8.3The HCL BigFix SCM Reporting site contains an outdated and unsupported version of the jQuery 1.x library.Check if you run itEPSS 0.21%May 13, 2026
- High7.3The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows its authentication to be bypassed.Check if you run itEPSS 0.30%May 13, 2026
- Medium5.0The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows a reflected cross site scripting (XSS) attack.Check if you run itEPSS 0.14%May 13, 2026
- Critical9.3The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows a cross-site origin WebSocket hijacking attack.Check if you run itEPSS 0.14%May 13, 2026
- High7.5The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows a symlink attack.Check if you run itEPSS 0.39%May 13, 2026
- UnknownCGA-jmcw-25jh-qjm9Open the advisoryMay 13, 2026
- Critical9.3MISP modules are autonomous modules that can be used to extend MISP for new services.Check if you run itEPSS 0.18%May 13, 2026
- Critical9.1fast-jwt provides fast JSON Web Token (JWT) implementation.Check if you run itEPSS 0.25%May 13, 2026
- High7.5Flight is an extensible micro-framework for PHP.Check if you run itEPSS 0.34%May 13, 2026
- High7.5Flight is an extensible micro-framework for PHP.Check if you run itEPSS 0.35%May 13, 2026
- High8.8Flight is an extensible micro-framework for PHP.Check if you run itEPSS 0.46%May 13, 2026
- Medium4.4Flight is an extensible micro-framework for PHP.Check if you run itEPSS 0.20%May 13, 2026
- High8.6Flight is an extensible micro-framework for PHP.Check if you run itEPSS 0.45%May 13, 2026
- High8.1When a user's access to mint tokens for a service account is revoked, it is sometimes still possible to do so for a few seconds after the event.Check if you run itEPSS 0.34%May 13, 2026
- Medium6.5A vulnerability in SQL Expressions allows an authenticated attacker to read arbitrary files from the Grafana server's filesystem.Check if you run itEPSS 0.37%May 13, 2026
- Medium6.5Using the $__timeGroup macro, one can achieve an OOM by overloading the server.Check if you run itEPSS 0.33%May 13, 2026
- High7.1An Editor can overwrite a dashboard not owned by them to acquire admin on that specific dashboard.Check if you run itEPSS 0.23%May 13, 2026
- High7.4When using an IPv6 allow-list for the Auth Proxy feature, it defaults to /32 addresses.Check if you run itEPSS 0.28%May 13, 2026
- Medium6.5A request to the Grafana plugin resources endpoint can cause unbounded memory allocation by reading the entire request body into memory.Check if you run itEPSS 0.33%May 13, 2026
- Medium6.5Any Editor could delete any snapshot, even if they have no access to read or write them.Check if you run itEPSS 0.23%May 13, 2026
- Medium6.5A race condition in Grafana Live allows authenticated users with Viewer role to trigger a server crash by sending concurrent requests that cause a fatal map access error.Check if you run itEPSS 0.26%May 13, 2026
- Medium6.5The Grafana Live push endpoint can be exploited to cause unbounded memory allocation by sending a large or streaming request body, potentially leading to out-of-memory conditions.Check if you run itEPSS 0.33%May 13, 2026
Sort