Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9Wazuh Manager authd service in wazuh-manager packages through version 4.7.3 contains an improper restriction of client-initiated SSL/TLS renegotiation vulnerability that allows remCheck if you run itEPSS 0.52%Mar 27, 2026
- High8.1In the latest version of mlflow/mlflow, when the app is enabled, tracing and assessment endpoints are not protected by permission validators.Check if you run itEPSS 0.34%Mar 27, 2026
- Medium5.5A vulnerability was found in OpenBMB XAgent 1.0.0.Check if you run itEPSS 0.45%Mar 27, 2026
- Low1.3A vulnerability has been found in OpenBMB XAgent 1.0.0.Check if you run itEPSS 0.40%Mar 27, 2026
- High8.3A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in admin/manage_category.php via the "id" parameter.Check if you run itEPSS 0.34%Mar 27, 2026
- Critical9.8A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the admin/manage_product.php file via the "id" parameter.Check if you run itEPSS 0.41%Mar 27, 2026
- Critical9.8A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the admin/view_product.php file via the "id" parameter.Check if you run itEPSS 0.34%Mar 27, 2026
- High8.8A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Actions.php file (specifically the save_category action).Check if you run itEPSS 0.46%Mar 27, 2026
- Critical9.8A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Actions.php file (specifically the save_customer action).Check if you run itEPSS 0.50%Mar 27, 2026
- High8.8A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Actions.php file (specifically the save_user action).Check if you run itEPSS 0.46%Mar 27, 2026
- Critical10.0The command auto-approval module in CodeRider-Kilo contains an OS Command Injection vulnerability, rendering its whitelist security mechanism ineffective.Check if you run itEPSS 2.07%Mar 27, 2026
- Critical9.1A flaw was found in Undertow.Check if you run itEPSS 0.69%Mar 27, 2026
- Critical9.1A flaw was found in Undertow.Check if you run itEPSS 0.72%Mar 27, 2026
- Critical9.1A flaw was found in Undertow.Check if you run itEPSS 0.73%Mar 27, 2026
- Medium5.3Wazuh authd contains a heap-buffer overflow vulnerability that allows attackers to cause memory corruption and malformed heap data by sending specially crafted input.Check if you run itEPSS 0.33%Mar 27, 2026
- Medium6.9Wazuh Manager authd service in wazuh-manager packages through version 4.7.3 contains an improper restriction of client-initiated SSL/TLS renegotiation vulnerability that allows remCheck if you run itEPSS 0.44%Mar 27, 2026
- High8.8Langflow Langflow Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 39.97%Mar 27, 2026
- High7.0The '/api/v1/files/images/{flow_id}/{file_name}' endpoint serves SVG files with the 'image/svg+xml' content type without sanitizing their content.Check if you run itEPSS 0.16%Mar 27, 2026
- Medium6.5The '/logs' and '/logs-stream' endpoints in the log router allow any authenticated user to read the full application log buffer.Check if you run itEPSS 0.25%Mar 27, 2026
- Medium6.3The '/api/v1/files/images/{flow_id}/{file_name}' endpoint does not enforce any authentication or authorization checks, allowing any unauthenticated user to download im…Check if you run itEPSS 0.21%Mar 27, 2026
- Medium5.1A reflected Cross-Site Scripting (XSS) vulnerability has been discovered in Clickedu.Check if you run itEPSS 0.28%Mar 27, 2026
- High8.2The Twilio integration webhook handler accepts any POST request without validating Twilio's 'X-Twilio-Signature'.Check if you run itEPSS 0.16%Mar 27, 2026
- Low2.0A flaw has been found in OpenBMB XAgent 1.0.0.Check if you run itEPSS 0.29%Mar 27, 2026
- Medium5.5A vulnerability was detected in Shenzhen Ruiming Technology Streamax Crocus 1.3.44.Check if you run itEPSS 0.33%Mar 27, 2026
- Medium5.5A vulnerability was found in Shenzhen Ruiming Technology Streamax Crocus 1.3.44.Check if you run itEPSS 0.26%Mar 27, 2026
Sort