Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8osslsigncode is a tool that implements Authenticode signing and timestamping.Check if you run itEPSS 0.17%Apr 9, 2026
- High7.7Plane is an an open-source project management tool.Check if you run itEPSS 0.26%Apr 9, 2026
- Medium5.3ChurchCRM is an open-source church management system.Check if you run itEPSS 0.27%Apr 9, 2026
- Critical9.1An out-of-bounds read vulnerability exists in the function within .Check if you run itEPSS 0.68%Apr 9, 2026
- High7.1A heap buffer overflow vulnerability exists in the PAM image parsing logic.Check if you run itEPSS 0.17%Apr 9, 2026
- Critical9.8A heap buffer overflow vulnerability exists during the decoding of DICOM images.Check if you run itEPSS 0.58%Apr 9, 2026
- Critical9.8A heap buffer overflow vulnerability exists in the DICOM image decoder.Check if you run itEPSS 0.61%Apr 9, 2026
- High7.1An out-of-bounds read vulnerability exists in the function of .Check if you run itEPSS 0.14%Apr 9, 2026
- High7.5A memory exhaustion vulnerability exists in the HTTP server due to unbounded use of the header.Check if you run itEPSS 0.59%Apr 9, 2026
- High7.5A memory exhaustion vulnerability exists in ZIP archive processing.Check if you run itEPSS 0.43%Apr 9, 2026
- High7.5A gzip decompression bomb vulnerability exists when Orthanc processes HTTP request with .Check if you run itEPSS 0.49%Apr 9, 2026
- High7.5An out-of-bounds read vulnerability exists in during DICOM meta-header parsing.Check if you run itEPSS 0.65%Apr 9, 2026
- Medium6.6Improper handling of Unicode encoding in SonicWall SMA1000 series appliances allows a remote authenticated SSLVPN admin to bypass AMC TOTP authentication.Check if you run itEPSS 0.61%Apr 9, 2026
- High7.2Improper neutralization of special elements used in an SQL command (“SQL Injection”) in SonicWall SMA1000 series appliances allows a remote authenticated attacker with…Check if you run itEPSS 0.64%Apr 9, 2026
- Medium4.4LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files.Check if you run itEPSS 0.20%Apr 9, 2026
- Medium4.3Cross Site Request Forgery vulnerability in Phpbb phbb3 v.3.3.15 allows a local attacker to execute arbitrary code via the Admin Control Panel icon management functionality.Check if you run itEPSS 0.15%Apr 9, 2026
- High8.8Cross Site Request Forgery vulnerability in Phpbb phbb3 v.3.3.15 allows a local attacker to execute arbitrary code via the login function and the authentication mechanismCheck if you run itEPSS 0.26%Apr 9, 2026
- Critical9.1Jizhicms v2.5.4 is vulnerable to Server-Side Request Forgery (SSRF) in User Evaluation, Message, and Comment modules.Check if you run itEPSS 0.29%Apr 9, 2026
- Medium5.3A weakness has been identified in code-projects Patient Record Management System 1.0.Check if you run itEPSS 0.27%Apr 9, 2026
- High8.4Helm is a package manager for Charts for Kubernetes.Check if you run itEPSS 0.22%Apr 9, 2026
- Low2.7In Ubuntu, Subiquity version 24.04.4 could leak sensitive user credentials during crash reporting.Check if you run itEPSS 0.29%Apr 9, 2026
- High8.4Helm is a package manager for Charts for Kubernetes.Check if you run itEPSS 0.21%Apr 9, 2026
- Low2.7In Ubuntu, ubuntu-desktop-provision version 24.04.4 could leak sensitive user credentials during crash reporting.Check if you run itEPSS 0.32%Apr 9, 2026
- Medium6.5fast-jwt provides fast JSON Web Token (JWT) implementation.Check if you run itEPSS 0.27%Apr 9, 2026
- Medium5.3fast-jwt provides fast JSON Web Token (JWT) implementation.Check if you run itEPSS 0.40%Apr 9, 2026
Sort