Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1In Spring AI, having access to a shared environment can expose the ONNX model used by the application.Check if you run itEPSS 0.10%Apr 28, 2026
- High8.8SQL injection vulnerability in Spring AI's allows attackers to execute arbitrary SQL queries via crafted document IDs.Check if you run itEPSS 0.34%Apr 28, 2026
- Medium4.8Due to improper TLS certificate validation in the DeskTime Time Tracking App before version 1.3.674, attackers who can position themselves in the network path between…Check if you run itEPSS 0.18%Apr 28, 2026
- High8.9A vulnerability has been found in Totolink A8000RU 7.1cu.643_b20200521.Check if you run itEPSS 2.43%Apr 28, 2026
- Low2.0A flaw has been found in code-projects Online Music Site 1.0.Check if you run itEPSS 0.23%Apr 28, 2026
- Medium5.5A vulnerability was detected in AgiFlow scaffold-mcp up to 1.0.27.Check if you run itEPSS 0.45%Apr 28, 2026
- Medium5.5A security vulnerability has been detected in ErlichLiu claude-agent-sdk-master up to b185aa7ff0d864581257008077b4010fca1747bf.Check if you run itEPSS 0.46%Apr 28, 2026
- Medium5.3The Booking Package plugin for WordPress is vulnerable to Price Manipulation in versions up to, and including, 1.7.06 This is due to the intentForStripe() function pas…Check if you run itEPSS 0.31%Apr 28, 2026
- Medium6.4The Woostify plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.5.0 This is due to insufficient input sanitization a…Check if you run itEPSS 0.21%Apr 28, 2026
- High7.8In KDE KCoreAddons before 6.25, KShell::quoteArgs is intended to safely quote arguments so that they can be passed to a shell command.Check if you run itEPSS 0.17%Apr 28, 2026
- Medium6.5KDE Dolphin before 25.12.3 allows applications in a Flatpak (or with AppArmor confinement) to open folders outside of the application sandbox without additional scrutiny.Check if you run itEPSS 0.13%Apr 28, 2026
- Medium5.9In Spring AI, an attacker can bypass conversation isolation and exfiltrate sensitive memory from other users’ chat histories, including secrets and credentials, by inj…Check if you run itEPSS 0.23%Apr 28, 2026
- High8.7Penetration Testing engineers at Amazon have identified a security flaw related to request handling in the web server component that could, under certain conditions, l…Check if you run itEPSS 0.19%Apr 28, 2026
- High8.5Penetration Testing engineers at Amazon discovered a vulnerability where the camera system failed to properly validate input, allowing specially crafted requests conta…Check if you run itEPSS 0.26%Apr 28, 2026
- Medium5.3Penetration Testing engineers at Amazon have discovered a flaw where the camera system fails to properly handle data supplied in certain requests, causing a service disruption.Check if you run itEPSS 0.24%Apr 28, 2026
- Medium5.5A weakness has been identified in BrowserOperator browser-operator-core up to 0.6.0.Check if you run itEPSS 0.43%Apr 28, 2026
- Medium6.1A vulnerability was determined in Artifex MuPDF up to 1.28.0.Check if you run itEPSS 0.24%Apr 28, 2026
- Low2.1A vulnerability was found in SourceCodester Safety Anger Pad 1.0.Check if you run itEPSS 0.26%Apr 28, 2026
- Low2.1A vulnerability was found in code-projects Coaching Management System 1.0.Check if you run itEPSS 0.23%Apr 28, 2026
- Medium5.4The Check & Log Email WordPress plugin before 2.0.13 does not properly handle email replacement, which could allow unauthenticated users to perform Stored XSS attacks…Check if you run itEPSS 0.15%Apr 28, 2026
- High8.6In Spring AI, various FilterExpressionConverter implementations accept a filter expression object and translate them to specific vector store query languages.Check if you run itEPSS 0.39%Apr 28, 2026
- High7.5In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accept_sec_context() on a system with a NegoECheck if you run itEPSS 0.60%Apr 28, 2026
- Medium5.5A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0.Check if you run itEPSS 0.25%Apr 28, 2026
- Medium5.5A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0.Check if you run itEPSS 0.25%Apr 28, 2026
- Medium5.5A security vulnerability has been detected in SourceCodester Pizzafy Ecommerce System 1.0.Check if you run itEPSS 0.25%Apr 28, 2026
Sort