Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1YetAnotherForum.NET (YAF.NET) is a C# ASP.NET forum.Check if you run itEPSS 0.28%May 12, 2026
- High8.8YetAnotherForum.NET (YAF.NET) is a C# ASP.NET forum.Check if you run itEPSS 0.49%May 12, 2026
- High8.2Open-WebSearch is a multi-engine MCP server, CLI, and local daemon for agent web search and content retrieval.Check if you run itEPSS 0.26%May 12, 2026
- High7.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in elixir-ecto postgrex ('Elixir.Postgrex.Notifications' module) all…Check if you run itEPSS 0.20%May 12, 2026
- Medium5.4A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the File Management module of FluentCMS 1.2.3.Check if you run itEPSS 0.14%May 12, 2026
- Medium5.3Other issue in the JavaScript Engine component.Check if you run itEPSS 0.30%May 12, 2026
- High7.3Use-after-free in the JavaScript: WebAssembly component.Check if you run itEPSS 0.50%May 12, 2026
- High8.8JIT miscompilation in the JavaScript Engine: JIT component.Check if you run itEPSS 0.42%May 12, 2026
- Medium6.5Incorrect boundary conditions in the JavaScript Engine: JIT component.Check if you run itEPSS 0.24%May 12, 2026
- High7.1CWE-22: Improper Limitation of a Pathname to a Restricted Directory (“Path Traversal”) vulnerability that could cause unauthorized access to sensitive files when user-…Check if you run itEPSS 0.30%May 12, 2026
- Critical9.1sealed-env is a cross-stack, zero-trust secret management library for Node.js and Java/Spring Boot.Check if you run itEPSS 0.33%May 12, 2026
- Low2.1Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.24%May 12, 2026
- High8.7pam_authnft is a PAM session module binding nftables firewall rules to authenticated sessions via cgroupv2 inodes.Check if you run itEPSS 0.26%May 12, 2026
- Medium4.3An attacker can cause uncontrolled memory usage with excessive bracing over IMAP.Check if you run itEPSS 0.62%May 12, 2026
- Medium6.7Dell PowerScale InsightIQ, versions 5.0.0 through 6.2.0, contains an execution with unnecessary privileges vulnerability.Check if you run itEPSS 0.12%May 12, 2026
- Medium4.3Attacker can use the IMAP SETACL command to inject the anyone permission to user's dovecot-acl file even if imap_acl_allow_anyone=no.Check if you run itEPSS 0.26%May 12, 2026
- Medium6.5Attacker can upload a malicious Sieve script over ManageSieve service (or locally) to bypass configured CPU time limits for Sieve up to 130 times of the configured limit.Check if you run itEPSS 0.34%May 12, 2026
- High8.2Dell PowerScale InsightIQ, versions 6.0.0 through 6.2.0, contains an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability.Check if you run itEPSS 0.46%May 12, 2026
- Medium5.3Attacker can use a specially crafted base64 exchange between Dovecot and Client to fake SCRAM TLS channel binding.Check if you run itEPSS 0.21%May 12, 2026
- Critical9.1When safe filter is used with variable expansion, all following pipelines on the same string are incorrectly interpreted as safe too, enabling unsafe data to be unescaped.Check if you run itEPSS 0.41%May 12, 2026
- High7.3Siemens Simcenter Femap contains a memory corruption vulnerability while parsing specially crafted IPT files.Check if you run itEPSS 0.20%May 12, 2026
- Medium4.7The consul-template library before version 0.42.0 is vulnerable to a sandbox path bypass in the file template helper that may allow reading an out-of-sandbox file.Check if you run itEPSS 0.15%May 12, 2026
- High8.7CWE‑331: Insufficient Entropy vulnerability exists that could lead to unauthorized access when an attacker on the network can exploit weaknesses in session‑management protections.Check if you run itEPSS 0.31%May 12, 2026
- High7.7Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Travel WP Travel wp-travel allows Blind SQL Injection.This iss…Check if you run itEPSS 0.22%May 12, 2026
- Medium5.3Insertion of Sensitive Information Into Sent Data vulnerability in Saad Iqbal WP EasyPay wp-easy-pay allows Retrieve Embedded Sensitive Data.This issue affects WP Easy…Check if you run itEPSS 0.20%May 12, 2026
Sort