Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.0Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Thales Sentinel LDK Runtime on Windows allows Stored XSS.Check if you run itEPSS 0.13%Mar 27, 2026
- High7.5Attacker can send a specifically crafted message before authentication that causes managesieve to allocate large amount of memory.Check if you run itEPSS 0.80%Mar 27, 2026
- High7.5Sending "NOOP (((...)))" command with 4000 parenthesis open+close results in ~1MB extra memory usage.Check if you run itEPSS 0.68%Mar 27, 2026
- High7.4Doveadm credentials are verified using direct comparison which is susceptible to timing oracle attack.Check if you run itEPSS 0.40%Mar 27, 2026
- High8.2Dovecot SQL based authentication can be bypassed when auth_username_chars is cleared by admin.Check if you run itEPSS 0.40%Mar 27, 2026
- High7.5ManageSieve AUTHENTICATE command crashes when using literal as SASL initial response.Check if you run itEPSS 0.73%Mar 27, 2026
- Medium5.1In OCaml through 4.14.3, Bigarray.reshape allows an integer overflow, and resultant reading of arbitrary memory, when untrusted data is processed.Check if you run itEPSS 0.12%Mar 27, 2026
- Medium5.1WordPress Plugin "OpenStreetMap" provided by MiKa contains a cross-site scripting vulnerability.Check if you run itEPSS 0.17%Mar 27, 2026
- Medium6.9Missing authentication for critical function vulnerability in BUFFALO Wi-Fi router products may allow an attacker to forcibly reboot the product without authentication.Check if you run itEPSS 0.39%Mar 27, 2026
- High8.6Hidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to gain access to the product’s debugging functionality, resulting in t…Check if you run itEPSS 0.38%Mar 27, 2026
- High8.7Authentication bypass issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to alter critical configuration settings without authentication.Check if you run itEPSS 0.37%Mar 27, 2026
- High8.7Code injection vulnerability exists in BUFFALO Wi-Fi router products.Check if you run itEPSS 0.27%Mar 27, 2026
- High8.6OS Command Injection vulnerability exists in BUFFALO Wi-Fi router products.Check if you run itEPSS 0.94%Mar 27, 2026
- High7.5Spring AI's spring-ai-neo4j-store contains a Cypher injection vulnerability in Neo4jVectorFilterExpressionConverter.Check if you run itEPSS 0.26%Mar 27, 2026
- High8.6Spring AI's spring-ai-bedrock-converse contains a Server-Side Request Forgery (SSRF) vulnerability in BedrockProxyChatModel when processing multimodal messages that in…Check if you run itEPSS 0.36%Mar 27, 2026
- Critical9.8In Spring AI, a SpEL injection vulnerability exists in SimpleVectorStore when a user-supplied value is used as a filter expression key.Check if you run itEPSS 1.11%Mar 27, 2026
- Medium6.5Use after free vulnerability in Softing smartLink HW-DP or smartLink HW-PN webserver allows HTTP DoS.Check if you run itEPSS 0.21%Mar 27, 2026
- High7.5In RedisFilterExpressionConverter of spring-ai-redis-store, when a user-controlled string is passed as a filter value for a TAG field, stringValue() inserts the value directly intoCheck if you run itEPSS 0.26%Mar 27, 2026
- Medium5.5A flaw was found in firewalld.Check if you run itEPSS 0.13%Mar 27, 2026
- Medium5.5A security vulnerability has been detected in Shenzhen Ruiming Technology Streamax Crocus up to 1.3.44.Check if you run itEPSS 0.26%Mar 27, 2026
- Medium6.5The Smart Slider 3 plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 3.5.1.33 via the 'actionExportAll' function.Check if you run itEPSS 0.49%Mar 27, 2026
- Low1.9A weakness has been identified in code-projects Exam Form Submission 1.0.Check if you run itEPSS 0.29%Mar 27, 2026
- Medium5.5A security flaw has been discovered in code-projects Simple Laundry System 1.0.Check if you run itEPSS 0.40%Mar 27, 2026
- Low2.1A vulnerability was identified in Page-Replica Page Replica up to e4a7f52e75093ee318b4d5a9a9db6751050d2ad0.Check if you run itEPSS 0.21%Mar 27, 2026
- High7.4A vulnerability was determined in Tenda AC5 15.03.06.47.Check if you run itEPSS 2.65%Mar 27, 2026
Sort