Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mark O’Donnell MSTW League Manager allows DOM-Based XSS.This issue affects MSTCheck if you run itEPSS 0.14%Apr 2, 2026
- Medium6.9A vulnerability was found in SourceCodester/mayuri_k Best Courier Management System 1.0.Check if you run itEPSS 0.32%Apr 2, 2026
- High8.1A flaw was found in Keycloak.Check if you run itEPSS 0.44%Apr 2, 2026
- High7.5A flaw was found in Keycloak.Check if you run itEPSS 0.64%Apr 2, 2026
- Medium5.3A flaw was found in Keycloak.Check if you run itEPSS 0.26%Apr 2, 2026
- High7.4A flaw was found in Keycloak.Check if you run itEPSS 0.43%Apr 2, 2026
- High7.3A flaw was found in Keycloak.Check if you run itEPSS 0.45%Apr 2, 2026
- Medium5.3A weakness has been identified in shsuishang modulithshop up to 829bac71f507e84684c782b9b062b8bf3b5585d6.Check if you run itEPSS 0.21%Apr 2, 2026
- High8.2libp2p-rust is the official rust language Implementation of the libp2p networking stack.Check if you run itEPSS 0.30%Apr 2, 2026
- High7.5libp2p-rust is the official rust language Implementation of the libp2p networking stack.Check if you run itEPSS 0.41%Apr 2, 2026
- Medium5.3A security flaw has been discovered in efforthye fast-filesystem-mcp up to 3.5.1.Check if you run itEPSS 1.24%Apr 2, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: bpf: Fix constant blinding for PROBE_MEM32 stores BPF_ST | BPF_PROBE_MEM32 immediate stores are not handled by bCheck if you run itEPSS 0.12%Apr 2, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: mm/mseal: update VMA end correctly on merge Previously we stored the end of the current VMA in curr_end, and theCheck if you run itEPSS 0.22%Apr 2, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() During futex_key_to_node_opt() executionCheck if you run itEPSS 0.17%Apr 2, 2026
- High7.5In the Linux kernel, the following vulnerability has been resolved: tls: Purge async_hold in tls_decrypt_async_wait() The async_hold queue pins encrypted input skbs while the AEADCheck if you run itEPSS 0.37%Apr 2, 2026
- High8.2ZDI-26-694: Linux Kernel Net Scheduler Clsact Qdisc Use-After-Free Local Privilege Escalation VulnerabilityCheck if you run itEPSS 0.16%Apr 2, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: netfilter: bpf: defer hook memory release until rcu readers are done Yiming Qian reports UaF when concurrent proCheck if you run itEPSS 0.16%Apr 2, 2026
- Medium6.9A vulnerability was identified in SourceCodester Leave Application System 1.0.Check if you run itEPSS 0.42%Apr 2, 2026
- High8.7Allocation of Resources Without Limits or Throttling vulnerability in gleam-wisp wisp allows a denial of service via multipart form body parsing.Check if you run itEPSS 0.63%Apr 2, 2026
- Medium6.3A vulnerability was determined in Cesanta Mongoose up to 7.20.Check if you run itEPSS 0.65%Apr 2, 2026
- Medium6.3A vulnerability was found in Cesanta Mongoose up to 7.20.Check if you run itEPSS 0.73%Apr 2, 2026
- Medium5.3An unauthenticated remote attacker can access a configuration file containing database credentials.Check if you run itEPSS 0.27%Apr 2, 2026
- High7.5An unauthenticated remote attacker can exploit an unauthenticated blind SQL Injection vulnerability in the mb24api endpoint due to improper neutralization of special elements in aCheck if you run itEPSS 0.34%Apr 2, 2026
- Critical9.1An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the setinfo endpoint due to improper neutralization of special elements in a SQL UPCheck if you run itEPSS 0.42%Apr 2, 2026
- High7.5An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getinfo endpoint due to improper neutralization of special elements in a SQL SECheck if you run itEPSS 0.34%Apr 2, 2026
Sort