Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Authorization Bypass Through User-Controlled Key vulnerability in Solvera Software Services Trade Inc.Check if you run itEPSS 0.41%Jan 22, 2026
- High7.5Authorization Bypass Through User-Controlled Key vulnerability in EXERT Computer Technologies Software Ltd.Check if you run itEPSS 0.37%Jan 22, 2026
- Low2.7jsdiff is a JavaScript text differencing implementation.Check if you run itEPSS 0.62%Jan 22, 2026
- High7.5seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities.Check if you run itEPSS 0.53%Jan 22, 2026
- Critical9.3SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatch nowKEVEPSS 96.43%Jan 22, 2026
- Medium6.5A path traversal vulnerability exists in TMS Management Console (version 6.3.7.27386.20250818) from TMS Global Software.Check if you run itEPSS 1.03%Jan 22, 2026
- Critical9.8An issue was discovered in the InsertFromURL() function of the Apryse HTML2PDF SDK thru 11.10.Check if you run itEPSS 0.53%Jan 22, 2026
- High7.5A Local File Inclusion (LFI) and a Server-Side Request Forgery (SSRF) vulnerability was found in the InsertFromHtmlString() function of the Apryse HTML2PDF SDK thru 11.6.0.Check if you run itEPSS 0.48%Jan 22, 2026
- High8.7Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.76%Jan 22, 2026
- Medium5.3The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the delete_cCheck if you run itEPSS 0.26%Jan 21, 2026
- Critical9.1Backstage is an open framework for building developer portals.Check if you run itEPSS 0.53%Jan 21, 2026
- High7.3Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes.Check if you run itEPSS 0.41%Jan 21, 2026
- High8.5CVAT is an open source interactive video and image annotation tool for computer vision.Check if you run itEPSS 0.30%Jan 21, 2026
- High8.6CVAT is an open source interactive video and image annotation tool for computer vision.Check if you run itEPSS 0.17%Jan 21, 2026
- Critical9.3External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets.Check if you run itEPSS 0.19%Jan 21, 2026
- High8.8vLLM is an inference and serving engine for large language models (LLMs).Check if you run itEPSS 0.98%Jan 21, 2026
- Medium5.3When passing data to the b64decode(), standard_b64decode(), and urlsafe_b64decode() functions in the "base64" module the characters "+/" will always be accepted, regardless of theCheck if you run itEPSS 0.86%Jan 21, 2026
- High8.2The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution.Check if you run itEPSS 1.82%Jan 21, 2026
- High8.7D-Link D-View 8 versions 2.0.1.107 and below contain an improper access control vulnerability in backend API endpoints.Check if you run itEPSS 0.38%Jan 21, 2026
- High8.4D-Link D-View 8 versions 2.0.1.107 and below contain an uncontrolled search path vulnerability in the installer.Check if you run itEPSS 0.17%Jan 21, 2026
- Medium4.8GetSimple CMS My SMTP Contact Plugin 1.1.2 suffers from a Stored Cross-Site Scripting (XSS) vulnerability.Check if you run itEPSS 0.28%Jan 21, 2026
- High8.5GetSimple CMS Custom JS 0.1 plugin contains a cross-site request forgery vulnerability that allows unauthenticated attackers to inject arbitrary client-side code into administratorCheck if you run itEPSS 0.28%Jan 21, 2026
- High8.6GetSimple CMS My SMTP Contact Plugin 1.1.2 contains a PHP code injection vulnerability.Check if you run itEPSS 1.29%Jan 21, 2026
- High8.5OKI Configuration Tool 1.6.53 contains an unquoted service path vulnerability in the OKI Local Port Manager service that allows local attackers to potentially execute arbitrary codCheck if you run itEPSS 0.15%Jan 21, 2026
- High8.5Sandboxie Plus 0.7.2 contains an unquoted service path vulnerability in the SbieSvc service that allows local attackers to execute code with elevated privileges.Check if you run itEPSS 0.15%Jan 21, 2026
Sort