Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1User-controlled chunkSize metadata from MongoDB lacks appropriate validation allowing malformed GridFS metadata to overflow the bounding container.Check if you run itEPSS 0.33%Jan 27, 2026
- Critical9.3An out-of-band SQL injection vulnerability (OOB SQLi) has been detected in the Performance Evaluation (EDD) application developed by Gabinete Técnico de Programación.Check if you run itEPSS 0.38%Jan 27, 2026
- Medium5.3Issue summary: A type confusion vulnerability exists in the signature verification of signed PKCS#7 data where an ASN1_TYPE union member is accessed without first validating the tyCheck if you run itEPSS 0.59%Jan 27, 2026
- Medium5.5Issue summary: An invalid or NULL pointer dereference can happen in an application processing a malformed PKCS#12 file.Check if you run itEPSS 0.18%Jan 27, 2026
- High7.5Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer dereference in the PKCS12_item_decrypt_d2i_ex() function.Check if you run itEPSS 0.94%Jan 27, 2026
- High7.5Issue summary: A type confusion vulnerability exists in the TimeStamp Response verification code where an ASN1_TYPE union member is accessed without first validating the type, causCheck if you run itEPSS 0.92%Jan 27, 2026
- High7.4Issue summary: Calling PKCS12_get_friendlyname() function on a maliciously crafted PKCS#12 file with a BMPString (UTF-16BE) friendly name containing non-ASCII BMP code point can trCheck if you run itEPSS 0.61%Jan 27, 2026
- Medium4.0Issue summary: When using the low-level OCB API directly with AES-NI or other hardware-accelerated code paths, inputs whose length is not a multiple of 16 bytes can leave the finalCheck if you run itEPSS 0.13%Jan 27, 2026
- Medium4.7Issue summary: Writing large, newline-free data into a BIO chain using the line-buffering filter where the next BIO performs short writes can trigger a heap-based out-of-bounds wriCheck if you run itEPSS 0.19%Jan 27, 2026
- Medium5.9Issue summary: A TLS 1.3 connection using certificate compression can be forced to allocate a large buffer before decompression without checking against the configured certificateCheck if you run itEPSS 0.46%Jan 27, 2026
- Medium5.5Issue summary: The 'openssl dgst' command-line tool silently truncates input data to 16MB when using one-shot signing algorithms and reports success instead of an error.Check if you run itEPSS 0.21%Jan 27, 2026
- Medium5.9Issue summary: If an application using the SSL_CIPHER_find() function in a QUIC protocol client or server receives an unknown cipher suite from the peer, a NULL dereference occurs.Check if you run itEPSS 0.82%Jan 27, 2026
- Critical9.8Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow.Check this weekEPSS 74.79%Jan 27, 2026
- Medium6.1Issue summary: PBMAC1 parameters in PKCS#12 files are missing validation which can trigger a stack-based buffer overflow, invalid pointer or NULL pointer dereference during MAC verCheck if you run itEPSS 5.23%Jan 27, 2026
- High8.8Use-after-free in the Layout: Scrolling and Overflow component.Check if you run itEPSS 0.28%Jan 27, 2026
- Medium6.5Mitigation bypass in the Privacy: Anti-Tracking component.Check if you run itEPSS 0.22%Jan 27, 2026
- High8.8Testa Online Test Management System 3.4.7 contains a SQL injection vulnerability that allows attackers to manipulate database queries through the 'q' search parameter.Check if you run itEPSS 0.29%Jan 27, 2026
- Critical9.3Gila CMS versions prior to 2.0.0 contain a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary system commands through manipulated HTTP hCheck if you run itEPSS 0.71%Jan 27, 2026
- High8.7Laravel Nova 3.7.0 contains a denial of service vulnerability that allows authenticated users to crash the application by manipulating the 'range' parameter.Check if you run itEPSS 0.38%Jan 27, 2026
- High8.7VestaCP 0.9.8-26 contains a session token vulnerability in the LoginAs module that allows remote attackers to manipulate authentication tokens.Check if you run itEPSS 0.63%Jan 27, 2026
- High7.1LibreNMS 1.46 contains an authenticated SQL injection vulnerability in the MAC accounting graph endpoint that allows remote attackers to extract database information.Check if you run itEPSS 0.47%Jan 27, 2026
- High8.7SyncBreeze 10.0.28 contains a denial of service vulnerability in the login endpoint that allows remote attackers to crash the service.Check if you run itEPSS 0.74%Jan 27, 2026
- Medium5.3Knockpy 4.1.1 contains a CSV injection vulnerability that allows attackers to inject malicious formulas into CSV reports through unfiltered server headers.Check if you run itEPSS 0.59%Jan 27, 2026
- High8.7Cassandra Web 0.5.0 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating path traversal parameters.Check if you run itEPSS 2.98%Jan 27, 2026
- Medium5.4A flaw was found in GLib.Check if you run itEPSS 0.37%Jan 27, 2026
Sort