Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low3.1A flaw was found in libssh in which a malicious SFTP (SSH File Transfer Protocol) server can exploit this by sending a malformed 'longname' field within an message during a file liCheck if you run itEPSS 0.47%Mar 26, 2026
- High8.2A flaw was found in libssh.Check if you run itEPSS 0.62%Mar 26, 2026
- Medium6.3A malicious SCP server can send unexpected paths that could make the client application override local files outside of working directory.Check if you run itEPSS 0.43%Mar 26, 2026
- Medium5.4A vulnerability has been discovered in Grafana OSS where an authorization bypass in the provisioning contact points API allows users with Editor role to modify protected webhook URCheck if you run itEPSS 0.28%Mar 26, 2026
- Medium6.5The Grafana MSSQL data source plugin contains a logic flaw that allows a low-privileged user (Viewer) to bypass API restrictions and trigger a catastrophic Out-Of-Memory (OOM) memoCheck if you run itEPSS 0.46%Mar 26, 2026
- High7.5A flaw was found in p11-kit.Check if you run itEPSS 1.34%Mar 26, 2026
- Medium6.5A flaw was found in GIMP.Check if you run itEPSS 0.52%Mar 26, 2026
- Medium6.5A flaw was found in GIMP.Check if you run itEPSS 0.89%Mar 26, 2026
- Medium5.5A flaw was found in GIMP's PSP (Paint Shop Pro) file parser.Check if you run itEPSS 0.53%Mar 26, 2026
- High7.5The DataRow.Decode function fails to properly validate field lengths.Check if you run itEPSS 0.69%Mar 26, 2026
- High7.5The Delete function fails to properly validate offsets when processing malformed JSON input.Check if you run itEPSS 0.80%Mar 26, 2026
- High7.5The msgpack decoder fails to properly validate the input buffer length when processing truncated fixext data (format codes 0xd4-0xd8).Check if you run itEPSS 0.43%Mar 26, 2026
- High8.2A flaw was found in libsoup's SoupServer.Check if you run itEPSS 0.46%Mar 26, 2026
- Medium6.9Ruckus Access Point products contain an arbitrary file read vulnerability in the command-line interface that allows authenticated remote attackers with administrative privileges toCheck if you run itEPSS 0.47%Mar 26, 2026
- High7.7Ruckus Unleashed contains a remote code execution vulnerability in the web-based management interface that allows authenticated remote attackers to execute arbitrary code on the syCheck if you run itEPSS 0.54%Mar 26, 2026
- Medium5.9Impact: When using multiple wildcards, combined with at least one parameter, a regular expression can be generated that is vulnerable to ReDoS.Check if you run itEPSS 0.37%Mar 26, 2026
- High8.8Ory Polis, formerly known as BoxyHQ Jackson, bridges or proxies a SAML login flow to OAuth 2.0 or OpenID Connect.Check if you run itEPSS 0.48%Mar 26, 2026
- High7.2Ory Keto is am open source authorization server for managing permissions at scale.Check if you run itEPSS 0.23%Mar 26, 2026
- High7.8Zen C is a systems programming language that compiles to human-readable GNU C/C11.Check if you run itEPSS 0.25%Mar 26, 2026
- High7.7Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists.Check if you run itEPSS 0.46%Mar 26, 2026
- High7.5Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists.Check if you run itEPSS 0.53%Mar 26, 2026
- High8.1Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists.Check if you run itEPSS 0.32%Mar 26, 2026
- Medium6.5Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists.Check if you run itEPSS 0.49%Mar 26, 2026
- Medium6.1A cross-site scripting (XSS) vulnerability in the wff_cols_pref.css.aspx endpoint of staffwiki v7.0.1.19219 allows attackers to execute arbitrary Javascript in the con…Check if you run itEPSS 0.26%Mar 26, 2026
- Medium5.3Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists.Check if you run itEPSS 0.33%Mar 26, 2026
Sort