Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical10.0Net::Dropbear versions before 0.14 for Perl contains a vulnerable version of libtomcrypt.Check if you run itEPSS 0.57%Apr 21, 2026
- Critical10.0Storable versions before 3.05 for Perl has a stack overflow.Check if you run itEPSS 0.64%Apr 21, 2026
- High8.5Vulnerability related to an unquoted search path in CivetWeb v1.16.Check if you run itEPSS 0.14%Apr 21, 2026
- High8.8The method "sock_recvfrom_into()" of "asyncio.ProacterEventLoop" (Windows only) was missing a boundary check for the data buffer when using nbytes parameter.Check if you run itEPSS 0.39%Apr 21, 2026
- High8.8In the Website module of Dolibarr ERP & CRM 22.0.4 and below, the application uses blacklist-based filtering to restrict dangerous PHP functions related to system comm…Check if you run itEPSS 0.57%Apr 21, 2026
- High8.8In Dolibarr ERP & CRM <= 22.0.4, PHP code detection and editing permission enforcement in the Website module is not applied consistently to all input parameters, allow…Check if you run itEPSS 0.27%Apr 21, 2026
- Medium6.3Dovestones Softwares AD Self Update <4.0.0.5 is vulnerable to Cross Site Request Forgery (CSRF).Check if you run itEPSS 0.10%Apr 21, 2026
- Medium6.1Dovestones Softwares ADPhonebook <4.0.1.1 has a reflected cross-site scripting (XSS) vulnerability in the search parameter of the /ADPhonebook?Department=HR endpoint.Check if you run itEPSS 0.19%Apr 21, 2026
- Medium5.3XiangShan (open-source high-performance RISC-V processor) commit edb1dfaf7d290ae99724594507dc46c2c2125384 (2024-11-28) has improper gating of its distributed CSR write…Check if you run itEPSS 0.10%Apr 21, 2026
- Medium6.5User‑Controlled HTTP Header in Fortra's GoAnywhere MFT prior to version 7.10.0 allows attackers to trigger a DNS lookup, as well as DNS Rebinding and Information Disclosure.Check if you run itEPSS 0.23%Apr 21, 2026
- Medium5.4HTML injection is possible in system generated emails in Fortra's GoAnywhere MFT prior to 7.10.0.Check if you run itEPSS 0.15%Apr 21, 2026
- Medium4.3An improper session timeout issue in Fortra's GoAnywhere MFT prior to version 7.10.0 results in SAML configured Web Users being redirected to the regular login page in…Check if you run itEPSS 0.18%Apr 21, 2026
- Medium5.3HCL BigFix Service Management (SM) Discovery is vulnerable to unenforced encryption due to port 80 (HTTP) being open, allowing unencrypted access.Check if you run itEPSS 0.09%Apr 21, 2026
- High8.2HCL BigFix Service Management is susceptible to HTTP Request Smuggling.Check if you run itEPSS 0.18%Apr 21, 2026
- Medium4.9Encrypted values in Fortra's GoAnywhere MFT prior to version 7.10.0 and GoAnywhere Agents prior to version 2.2.0 utilize a static IV which allows admin users to brute-…Check if you run itEPSS 0.13%Apr 21, 2026
- High7.3The login limit is not enforced on the SFTP service of Fortra's GoAnywhere MFT prior to 7.10.0 if the Web User attempting to be logged in to is configured to log in wi…Check if you run itEPSS 0.19%Apr 21, 2026
- Medium5.1Cross-Site Scripting (XSS) vulnerability reflected in Semantic MediaWiki.Check if you run itEPSS 0.29%Apr 21, 2026
- High7.5Memory safety bugs present in Firefox 149 and Thunderbird 149.Check if you run itEPSS 0.36%Apr 21, 2026
- Medium5.3Incorrect boundary conditions, integer overflow in the Audio/Video: Playback component.Check if you run itEPSS 0.23%Apr 21, 2026
- High7.5Information disclosure in the IP Protection component.Check if you run itEPSS 0.25%Apr 21, 2026
- High7.5Denial-of-service in the Audio/Video: Playback component.Check if you run itEPSS 0.29%Apr 21, 2026
- High7.5Denial-of-service in the Audio/Video: Playback component.Check if you run itEPSS 0.29%Apr 21, 2026
- Medium5.3Other issue in the JavaScript Engine component.Check if you run itEPSS 0.21%Apr 21, 2026
- Medium5.3Invalid pointer in the Audio/Video: Playback component.Check if you run itEPSS 0.26%Apr 21, 2026
- Medium5.3Other issue in the Networking: DNS component.Check if you run itEPSS 0.16%Apr 21, 2026
Sort