Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3A flaw has been found in vanna-ai vanna up to 2.0.2.Check if you run itEPSS 0.17%Apr 2, 2026
- Medium6.9A vulnerability was detected in vanna-ai vanna up to 2.0.2.Check if you run itEPSS 0.42%Apr 2, 2026
- Medium5.3A security vulnerability has been detected in itsourcecode Payroll Management System up to 1.0.Check if you run itEPSS 0.34%Apr 2, 2026
- Medium5.3A weakness has been identified in LibRaw up to 0.22.0.Check if you run itEPSS 0.64%Apr 2, 2026
- Medium5.3A security flaw has been discovered in Nothings stb up to 1.22.Check if you run itEPSS 0.43%Apr 2, 2026
- Medium5.4IBM Content Navigator 3.0.15, 3.1.0, and 3.2.0 is vulnerable to cross-site scripting.Check if you run itEPSS 0.21%Apr 2, 2026
- Medium5.3A vulnerability was identified in Nothings stb up to 1.22.Check if you run itEPSS 0.45%Apr 2, 2026
- Critical9.8An issue was discovered in Mbed TLS versions from 2.19.0 up to 3.6.5, Mbed TLS 4.0.0.Check if you run itEPSS 0.44%Apr 2, 2026
- High7.5An issue was discovered in Mbed TLS 3.x before 3.6.6.Check if you run itEPSS 0.41%Apr 2, 2026
- Medium6.8An issue in the firmware update mechanism of Qianniao QN-L23PA0904 v20250721.1640 allows attackers to gain root access, install backdoors, and exfiltrate data via supplying a craftCheck if you run itEPSS 0.12%Apr 2, 2026
- High7.5A Time-of-Check to Time-of-Use (TOCTOU) race condition vulnerability in Balena Etcher for Windows prior to v2.1.4 allows attackers to escalate privileges and execute arbitrary codeCheck if you run itEPSS 0.18%Apr 2, 2026
- Medium6.1Multiple reflected cross-site scripting (XSS) vulnerabilities in the login.php endpoint of Interzen Consulting S.r.l ZenShare Suite v17.0 allows attackers to execute arbitrary JavaCheck if you run itEPSS 0.21%Apr 2, 2026
- Medium6.1A reflected cross-site scripting (XSS) vulnerability in the login_newpwd.php endpoint of Interzen Consulting S.r.l ZenShare Suite v17.0 allows attackers to execute arbitrary JavascCheck if you run itEPSS 0.22%Apr 2, 2026
- Medium5.3User enumeration vulnerability in /pwreset.php in osTicket v1.18.2 allows remote attackers to enumerate valid usernames registered in the platform.Check if you run itEPSS 0.36%Apr 2, 2026
- Critical9.9An issue was discovered in Percona PMM before 3.7.Check if you run itEPSS 0.30%Apr 2, 2026
- Medium4.0HCL BigFix Platform is affected by insufficient authentication.Check if you run itEPSS 0.12%Apr 1, 2026
- High8.8HCL BigFix Platform is affected by insecure permissions on private cryptographic keys.Check if you run itEPSS 0.10%Apr 1, 2026
- Medium5.3A vulnerability was determined in Nothings stb up to 1.26.Check if you run itEPSS 0.52%Apr 1, 2026
- Medium6.5IBM Aspera Shares 1.9.9 through 1.11.0 does not properly rate limit the frequency that an authenticated user can send emails, which could result in email flooding or a denial of seCheck if you run itEPSS 0.35%Apr 1, 2026
- Medium6.1IBM Aspera Shares 1.9.9 through 1.11.0 is vulnerable to HTML injection.Check if you run itEPSS 0.25%Apr 1, 2026
- Medium5.4IBM Aspera Shares 1.9.9 through 1.11.0 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers.Check if you run itEPSS 0.21%Apr 1, 2026
- High8.4V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read in VS6ComFile!get_macro_mem_COM.Check if you run itEPSS 0.20%Apr 1, 2026
- High8.4V-SFT versions 6.2.10.0 and prior contain a stack-based buffer overflow in VS6ComFile!CSaveData::_conv_AnimationItem.Check if you run itEPSS 0.21%Apr 1, 2026
- Medium5.5IBM Aspera Shares 1.9.9 through 1.11.0 is vulnerable to stored cross-site scripting.Check if you run itEPSS 0.20%Apr 1, 2026
- High8.4V-SFT versions 6.2.10.0 and prior contain an out-of-bounds read vulnerability in VS6MemInIF!set_temp_type_default.Check if you run itEPSS 0.20%Apr 1, 2026
Sort