Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5An improper resource deallocation and closure vulnerability in the tools/zmqsend.c component of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) via supplying a crCheck if you run itEPSS 0.41%Apr 13, 2026
- High7.5An out-of-bounds read in the read_global_param() function (libavcodec/av1dec.c) of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input.Check if you run itEPSS 0.35%Apr 13, 2026
- High8.8The endpoint in KubePlus 4.14 in the kubeconfiggenerator component is vulnerable to command injection.Check if you run itEPSS 2.22%Apr 13, 2026
- Medium6.2A stack overflow in the experimental/tinyobj_loader_opt.h file of tinyobjloader commit d56555b allows attackers to cause a Denial of Service (DoS) via supplying a crafted .mtl fileCheck if you run itEPSS 0.18%Apr 13, 2026
- Unknownmjdm majordomo Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 23.98%Apr 13, 2026
- Medium5.4Vtiger CRM 8.4.0 contains a reflected cross-site scripting (XSS) vulnerability in the MailManager module.Check if you run itEPSS 0.14%Apr 13, 2026
- High8.4Nitro PDF Pro for Windows 14.41.1.4 contains a heap use-after-free vulnerability in the implementation of the JavaScript method this.mailDoc().Check if you run itEPSS 0.21%Apr 13, 2026
- High7.5Nitro PDF Pro before 14.43 for Windows contains a NULL pointer dereference vulnerability in the JavaScript implementation of app.alert().Check if you run itEPSS 0.45%Apr 13, 2026
- High7.5A NULL pointer dereference in Nitro PDF Pro for Windows v14.41.1.4 allows attackers to cause a Denial of Service (DoS) via a crafted XFA packet.Check if you run itEPSS 0.46%Apr 13, 2026
- Medium5.4Cross-Site Scripting vulnerability in the Snipe-IT web-based asset management system v8.3.0 to up and including v8.3.1 allows authenticated attacker with lowest privileges sufficieCheck if you run itEPSS 0.24%Apr 13, 2026
- High8.8In Phpgurukul Online Course Registration v3.1, an arbitrary file upload vulnerability was discovered within the profile picture upload functionality on the /my-profile.php page.Check if you run itEPSS 0.32%Apr 13, 2026
- High8.7A vulnerability was detected in Tenda F451 1.0.0.7_cn_svn7958.Check if you run itEPSS 0.54%Apr 12, 2026
- High7.4A security flaw has been discovered in Tenda F451 1.0.0.7_cn_svn7958.Check if you run itEPSS 0.67%Apr 12, 2026
- High8.9A vulnerability was found in Totolink A7100RU 7.4cu.2313_b20191024.Check if you run itEPSS 1.85%Apr 12, 2026
- High8.7A weakness has been identified in Tenda F451 1.0.0.7_cn_svn7958.Check if you run itEPSS 0.63%Apr 12, 2026
- High8.7A vulnerability was identified in Tenda F451 1.0.0.7_cn_svn7958.Check if you run itEPSS 0.55%Apr 12, 2026
- Critical9.3A vulnerability was determined in Totolink A7100RU 7.4cu.2313_b20191024.Check if you run itEPSS 2.21%Apr 12, 2026
- Medium6.9A flaw has been found in chatboxai chatbox up to 1.20.0.Check if you run itEPSS 1.56%Apr 12, 2026
- Medium5.5A vulnerability was detected in zhayujie chatgpt-on-wechat CowAgent up to 2.0.4.Check if you run itEPSS 0.40%Apr 12, 2026
- High7.5Varnish Cache 9 before 9.0.1 allows a "workspace overflow" denial of service (daemon panic) after timeout_linger.Check if you run itEPSS 0.35%Apr 12, 2026
- High7.5Varnish Enterprise before 6.0.16r12 allows a "workspace overflow" denial of service (daemon panic) for shared VCL.Check if you run itEPSS 0.24%Apr 12, 2026
- High7.5Varnish Cache 9 before 9.0.1 and Varnish Enterprise before 6.0.16r11 allows a "workspace overflow" denial of service (daemon panic) for certain amounts of prefetched data.Check if you run itEPSS 0.24%Apr 12, 2026
- High7.1In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak information out of…Check if you run itEPSS 0.15%Apr 12, 2026
- High7.1In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks.Check if you run itEPSS 0.10%Apr 12, 2026
- Critical9.8In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an untrusted party, and is then usCheck if you run itEPSS 0.43%Apr 12, 2026
Sort