Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.2grav-plugin-admin is the admin plugin for Grav is an HTML user interface that provides a convenient way to configure Grav and easily create and modify pages.Check if you run itEPSS 0.43%May 11, 2026
- Medium6.5WebDyne::Session versions before 3.003_704 for Perl generate the session id insecurely.Check if you run itEPSS 0.37%May 11, 2026
- High7.3Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.81%May 11, 2026
- High7.5XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences.Check if you run itEPSS 0.88%May 10, 2026
- Medium6.5Net::CIDR::Lite versions before 0.24 for Perl does not properly consider extraneous zero characters in CIDR mask values, which may allow IP ACL bypass.Check if you run itEPSS 0.48%May 10, 2026
- Medium6.5Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass.Check if you run itEPSS 0.48%May 10, 2026
- High7.5Catalyst::Plugin::Statsd versions through 0.10.0 for Perl may leak session ids.Check if you run itEPSS 0.36%May 10, 2026
- Medium5.3Plack::Middleware::Statsd versions before 0.9.0 for Perl may leak user IP addresses.Check if you run itEPSS 0.26%May 10, 2026
- Medium5.1uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the backend/mailingLog/manage module.Check if you run itEPSS 0.25%May 10, 2026
- Medium5.1uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the auctions/manage module.Check if you run itEPSS 0.25%May 10, 2026
- Medium5.1uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the tickets/manage module.Check if you run itEPSS 0.25%May 10, 2026
- Medium5.1uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the news/manage module.Check if you run itEPSS 0.25%May 10, 2026
- Medium5.1uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the posts/manage module.Check if you run itEPSS 0.25%May 10, 2026
- Medium5.1uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the auctions/myAuctions/status/loose module.Check if you run itEPSS 0.25%May 10, 2026
- Medium5.1uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the auctions/myAuctions/status/active module.Check if you run itEPSS 0.25%May 10, 2026
- Medium5.1uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the orders/myOrders module.Check if you run itEPSS 0.25%May 10, 2026
- High7.4In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the PDO Firebird driver improperly handles NUL bytes when prepar…Check if you run itEPSS 0.44%May 10, 2026
- Medium6.8SysReptor is a fully customizable pentest reporting platform.Check if you run itEPSS 0.31%May 8, 2026
- Medium5.3Insufficient input validation of the parameter of the plugin allows arbitrary Perl code execution on behalf of the already authenticated account's system user.Check if you run itEPSS 0.69%May 8, 2026
- High7.5Crypt::PasswdMD5 versions through 1.42 for Perl generates insecure random values for salts.Check if you run itEPSS 0.51%May 8, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: firmware: stratix10-rsu: Fix NULL pointer dereference when RSU is disabled When the Remote System U…Check if you run itEPSS 0.15%May 8, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drm/xe/sync: Fix user fence leak on alloc failure When dma_fence_chain_alloc() fails, properly rele…Check if you run itEPSS 0.16%May 8, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: properly validate the data in rtw_get_ie_ex() Just like in commit 154828bf9559…Check if you run itEPSS 0.16%May 8, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: macb: Shuffle the tx ring before enabling tx Quanyang observed that when using an NFS rootfs o…Check if you run itEPSS 0.16%May 8, 2026
- Critical9.3SEPPmail Secure Email Gateway before version 15.0.2.1 allows unauthenticated remote code execution in the new GINA UI because an endpoint passes attacker-controlled in…Check if you run itEPSS 0.73%May 8, 2026