Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.4An insecure direct object reference (IDOR) vulnerability in MphRx's Minerva V3.6.0, specifically in the '/minerva/user/updateUserProfile' endpoint.Check if you run itEPSS 0.25%Apr 28, 2026
- High7.3The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.2 and newer fail to enforce the caller-supplied buffer length, and can re…Check if you run itEPSS 0.24%Apr 28, 2026
- High7.4Apache Thrift has an issue with Java TSSLTransportFactory hostname verificationOpen the advisoryApr 28, 2026
- Low2.1A vulnerability has been found in SourceCodester Pizzafy Ecommerce System 1.0.Check if you run itEPSS 0.20%Apr 28, 2026
- Low2.1A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0.Check if you run itEPSS 0.19%Apr 28, 2026
- Low2.1A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0.Check if you run itEPSS 0.19%Apr 28, 2026
- Low2.1A security vulnerability has been detected in SourceCodester Pizzafy Ecommerce System 1.0.Check if you run itEPSS 0.24%Apr 28, 2026
- High7.5An unsecured configuration interface on affected devices allows unauthenticated remote attackers to access sensitive information, including hashed credentials and access codes.Check if you run itEPSS 0.40%Apr 28, 2026
- High8.4AVACAST developed by eMPIA Technology has a Unquoted Service Path vulnerability, allowing privileged local attackers to place a malicious executable file in a specific…Check if you run itEPSS 0.12%Apr 28, 2026
- High8.5AVACAST developed by eMPIA Technology, has a DLL Hijacking vulnerability, allowing authenticated local attackers to place a malicious DLL in a specific directory, resu…Check if you run itEPSS 0.11%Apr 28, 2026
- Low2.1A weakness has been identified in SourceCodester Pizzafy Ecommerce System 1.0.Check if you run itEPSS 0.25%Apr 28, 2026
- High8.7Uncontrolled Recursion vulnerability in Apache Thrift Node.js bindings This issue affects Apache Thrift: before 0.23.0.Check if you run itEPSS 0.45%Apr 28, 2026
- Medium6.5Out-of-bounds Read vulnerability in Apache Thrift.Check if you run itEPSS 0.90%Apr 28, 2026
- Medium5.3Uncontrolled Recursion vulnerability in Apache Thrift.Check if you run itEPSS 1.10%Apr 28, 2026
- High7.3Integer Overflow or Wraparound vulnerability in Apache Thrift.Check if you run itEPSS 0.93%Apr 28, 2026
- High8.2Out-of-bounds Read vulnerability in Apache Thrift.Check if you run itEPSS 0.92%Apr 28, 2026
- High7.5Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue affects Apache Thrift: before 0.23.0.Check if you run itEPSS 1.16%Apr 28, 2026
- High7.5Mismatched Memory Management Routines vulnerability in Apache Thrift c_glib language bindings.Check if you run itEPSS 1.04%Apr 28, 2026
- High8.9A vulnerability was found in D-Link DI-8100 16.07.26A1.Check if you run itEPSS 2.15%Apr 28, 2026
- High7.3A vulnerability has been found in D-Link DI-8100 16.07.26A1.Check if you run itEPSS 0.72%Apr 28, 2026
- High8.9A security flaw has been discovered in Totolink A8000RU 7.1cu.643_b20200521.Check if you run itEPSS 2.42%Apr 28, 2026
- High8.9A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521.Check if you run itEPSS 2.45%Apr 28, 2026
- High8.9A vulnerability was determined in Totolink A8000RU 7.1cu.643_b20200521.Check if you run itEPSS 2.45%Apr 28, 2026
- High8.9A vulnerability was found in Totolink A8000RU 7.1cu.643_b20200521.Check if you run itEPSS 2.45%Apr 28, 2026
- Medium6.5In Spring AI, a malicious PDF file can be crafted that triggers the allocation of unreasonable amounts of memory when handled by .Check if you run itEPSS 0.24%Apr 28, 2026
Sort