Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in YMFE yapi v1.12.0.Check if you run itEPSS 0.22%Mar 9, 2026
- High7.5An issue pertaining to CWE-400: Uncontrolled Resource Consumption was discovered in YMFE yapi v1.12.0 and allows attackers to cause a denial of service.Check if you run itEPSS 0.39%Mar 9, 2026
- Medium6.5An issue pertaining to CWE-312: Cleartext Storage of Sensitive Information was discovered in lesspass lesspass v9.6.9 which allows attackers to obtain sensitive information.Check if you run itEPSS 0.19%Mar 9, 2026
- High7.5An issue pertaining to CWE-319: Cleartext Transmission of Sensitive Information was discovered in Nexusoft NexusInterface v3.2.0-beta.2.Check if you run itEPSS 0.21%Mar 9, 2026
- High7.5An issue pertaining to CWE-400: Uncontrolled Resource Consumption was discovered in Nexusoft NexusInterface v3.2.0-beta.2.Check if you run itEPSS 0.39%Mar 9, 2026
- Critical9.8An issue pertaining to CWE-829: Inclusion of Functionality from Untrusted Control Sphere was discovered in Miazzy oa-front-service master.Check if you run itEPSS 0.41%Mar 9, 2026
- Critical9.8An issue pertaining to CWE-918: Server-Side Request Forgery was discovered in oslabs-beta ThermaKube master.Check if you run itEPSS 0.38%Mar 9, 2026
- Medium5.3An issue pertaining to CWE-532: Insertion of Sensitive Information into Log File was discovered in LupinLin1 jimeng-web-mcp v2.1.2.Check if you run itEPSS 0.27%Mar 9, 2026
- Critical9.8An issue pertaining to CWE-78: Improper Neutralization of Special Elements used in an OS Command was discovered in linagora Twake v2023.Q1.1223.Check if you run itEPSS 0.44%Mar 9, 2026
- High8.8An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in linagora Twake v2023.Q1.1223.Check if you run itEPSS 0.41%Mar 9, 2026
- Medium6.1An issue pertaining to CWE-601: URL Redirection to Untrusted Site was discovered in linagora Twake v2023.Q1.1223.Check if you run itEPSS 0.25%Mar 9, 2026
- High7.5An issue pertaining to CWE-1333: Inefficient Regular Expression Complexity (4.19) was discovered in mscdex ssh2 v1.17.0.Check if you run itEPSS 0.39%Mar 9, 2026
- Medium5.4An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.Check if you run itEPSS 0.27%Mar 9, 2026
- Medium6.1An issue pertaining to CWE-601: URL Redirection to Untrusted Site was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.Check if you run itEPSS 0.28%Mar 9, 2026
- High8.8An issue pertaining to CWE-352: Cross-Site Request Forgery was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.Check if you run itEPSS 0.18%Mar 9, 2026
- High7.5An issue pertaining to CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.Check if you run itEPSS 0.48%Mar 9, 2026
- Medium6.2GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF .debug_rnglists data.Check if you run itEPSS 0.20%Mar 9, 2026
- Medium6.2GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF loclists data.Check if you run itEPSS 0.18%Mar 9, 2026
- Medium5.3A vulnerability was detected in Bytedesk up to 1.3.9.Check if you run itEPSS 0.48%Mar 8, 2026
- Medium5.3A security vulnerability has been detected in Bytedesk up to 1.3.9.Check if you run itEPSS 0.48%Mar 8, 2026
- High7.3A weakness has been identified in UltraVNC 1.6.4.0 on Windows.Check if you run itEPSS 0.18%Mar 8, 2026
- Medium5.3A security flaw has been discovered in EasyCMS up to 1.6.Check if you run itEPSS 0.31%Mar 8, 2026
- Medium5.3A vulnerability was identified in EasyCMS up to 1.6.Check if you run itEPSS 0.31%Mar 8, 2026
- Medium5.3A vulnerability has been found in SourceCodester/janobe Resort Reservation System 1.0.Check if you run itEPSS 0.34%Mar 8, 2026
- Medium5.3A flaw has been found in SourceCodester Computer Laboratory Management System 1.0.Check if you run itEPSS 0.25%Mar 8, 2026
Sort