Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8IBM Storage Protect Server 8.2.0 IBM Storage Protect Plus Server is vulnerable to SQL injection.Check if you run itEPSS 0.26%Apr 1, 2026
- Critical9.8An issue was discovered in Mbed TLS through 3.6.5 and TF-PSA-Crypto 1.0.0.Check if you run itEPSS 0.37%Apr 1, 2026
- High7.5An issue was discovered in Mbed TLS through 3.6.5 and 4.x through 4.0.0.Check if you run itEPSS 0.29%Apr 1, 2026
- Critical9.1An issue was discovered in Mbed TLS 3.5.0 through 4.0.0.Check if you run itEPSS 0.25%Apr 1, 2026
- Critical9.1An issue was discovered in Mbed TLS 3.5.x and 3.6.x through 3.6.5 and TF-PSA-Crypto 1.0.Check if you run itEPSS 0.21%Apr 1, 2026
- Medium6.7An issue was discovered in Mbed TLS before 3.6.6 and 4.x before 4.1.0 and TF-PSA-Crypto before 1.1.0.Check if you run itEPSS 0.20%Apr 1, 2026
- Critical9.8TOTOlink A3600R v5.9c.4959 contains a buffer overflow vulnerability in the setAppEasyWizardConfig interface of /lib/cste_modules/app.so.Check if you run itEPSS 0.61%Apr 1, 2026
- Critical9.8An issue was discovered in DedeCMS 5.7.118 allowing attackers to execute code via crafted setup tag values in a module upload.Check if you run itEPSS 0.58%Apr 1, 2026
- High7.5A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0.Check if you run itEPSS 0.26%Apr 1, 2026
- Medium6.5A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to the lack of proper input validation.Check if you run itEPSS 0.31%Apr 1, 2026
- High8.4An arbitrary file overwrite vulnerability in Docudepot PDF Reader: PDF Viewer APP v1.0.34 allows attackers to overwrite critical internal files via the file import process, leadingCheck if you run itEPSS 0.15%Apr 1, 2026
- High8.4An arbitrary file overwrite vulnerability in Ora Tools PDF Reader ' Reader & Editor APPv4.3.5 allows attackers to overwrite critical internal files via the file import process, leaCheck if you run itEPSS 0.15%Apr 1, 2026
- High8.4An arbitrary file overwrite vulnerability in Deep Thought Industries ACE Scanner PDF Scanner v1.4.5 allows attackers to overwrite critical internal files via the file import procesCheck if you run itEPSS 0.18%Apr 1, 2026
- High7.3pandas-ai v3.0.0 was discovered to contain a SQL injection vulnerability via the pandasai.agent.base._execute_sql_query component.Check if you run itEPSS 0.19%Apr 1, 2026
- Medium5.4Multiple stored cross-site scripting (XSS) vulnerabilities in the submit_add_user.asp endpoint of DDSN Interactive Acora CMS v10.7.1 allow attackers to execute arbitrary web scriptCheck if you run itEPSS 0.17%Apr 1, 2026
- High7.7Mbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random Number Generator (PRNG).Check if you run itEPSS 0.18%Apr 1, 2026
- Medium6.5Mbed TLS v3.3.0 up to 3.6.5 and 4.0.0 allows Algorithm Downgrade.Check if you run itEPSS 0.14%Apr 1, 2026
- High7.5Mbed TLS 3.5.0 to 3.6.5 fixed in 3.6.6 and 4.1.0 has a buffer overflow in the x509_inet_pton_ipv6() functionCheck if you run itEPSS 0.32%Apr 1, 2026
- Medium4.7The login mechanism of Sage DPW 2025_06_004 displays distinct responses for valid and invalid usernames, allowing enumeration of existing accounts in versions before 2021_06_000.Check if you run itEPSS 0.15%Apr 1, 2026
- Medium5.3The login mechanism of Sage DPW 2021_06_004 displays distinct responses for valid and invalid usernames, allowing enumeration of existing accounts in versions before 2021_06_000.Check if you run itEPSS 0.27%Apr 1, 2026
- Medium5.1In Mbed TLS through 4.0.0, there is a compiler-induced timing side channel (in RSA and CBC/ECB decryption) that only occurs with LLVM's select-optimize feature.Check if you run itEPSS 0.28%Apr 1, 2026
- UnknownInsertion of Sensitive Information into Log FilePatch nowKEVEPSS 1.83%Apr 1, 2026
- Unknownayecode userswp Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 2.38%Apr 1, 2026
- Critical9.8A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3 allows attackers to execute arbitrary code via a crafted HTTP request.Check if you run itEPSS 1.59%Apr 1, 2026
- Critical9.8There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execute arbitrary code on components through speCheck if you run itEPSS 0.54%Apr 1, 2026
Sort