Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.2libp2p-rust is the official rust language Implementation of the libp2p networking stack.Check if you run itEPSS 0.58%Mar 27, 2026
- High8.7Bludit’s API plugin allows an authenticated attacker with a valid API token to upload files of any type and extension without restriction, which can then be executed, leading to ReCheck if you run itEPSS 2.04%Mar 27, 2026
- Medium4.8Bludit is vulnerable to Stored Cross-Site Scripting (XSS) in its image upload functionality.Check if you run itEPSS 0.20%Mar 27, 2026
- Medium4.8Bludit allows user's session identifier to be set before authentication.Check if you run itEPSS 0.38%Mar 27, 2026
- High7.1OS Command Injection vulnerability in NEC Platforms, Ltd.Check if you run itEPSS 1.04%Mar 27, 2026
- High7.1OS Command Injection vulnerability in NEC Platforms, Ltd.Check if you run itEPSS 0.90%Mar 27, 2026
- Medium6.3Hidden Functionality vulnerability in NEC Platforms, Ltd.Check if you run itEPSS 0.17%Mar 27, 2026
- Medium6.0Path Traversal vulnerability in NEC Platforms, Ltd.Check if you run itEPSS 0.33%Mar 27, 2026
- Medium6.3Missing Authorization vulnerability in NEC Platforms, Ltd.Check if you run itEPSS 0.15%Mar 27, 2026
- Medium6.5Stack-based buffer overflow vulnerability in Softing Industrial Automation GmbH gateways allows overflow buffers.Check if you run itEPSS 0.37%Mar 27, 2026
- High7.0Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Thales Sentinel LDK Runtime on Windows allows Stored XSS.Check if you run itEPSS 0.13%Mar 27, 2026
- Medium5.3If auth_username_chars is empty, it is possible to inject arbitrary LDAP filter to Dovecot's LDAP authentication.Check if you run itEPSS 0.30%Mar 27, 2026
- Medium5.3A mail message containing excessive amount of RFC 2231 MIME parameters causes LMTP to use too much CPU.Check if you run itEPSS 0.39%Mar 27, 2026
- High7.5Attacker can send a specifically crafted message before authentication that causes managesieve to allocate large amount of memory.Check if you run itEPSS 0.82%Mar 27, 2026
- High7.5Sending "NOOP (((...)))" command with 4000 parenthesis open+close results in ~1MB extra memory usage.Check if you run itEPSS 0.69%Mar 27, 2026
- High7.4Doveadm credentials are verified using direct comparison which is susceptible to timing oracle attack.Check if you run itEPSS 0.41%Mar 27, 2026
- Medium6.8Dovecot OTP authentication is vulnerable to replay attack under specific conditions.Check if you run itEPSS 0.32%Mar 27, 2026
- High8.2Dovecot SQL based authentication can be bypassed when auth_username_chars is cleared by admin.Check if you run itEPSS 0.41%Mar 27, 2026
- Medium5.3When dovecot has been configured to use per-domain passwd files, and they are placed one path component above /etc, or slash has been added to allowed characters, path traversal caCheck if you run itEPSS 0.44%Mar 27, 2026
- High7.5ManageSieve AUTHENTICATE command crashes when using literal as SASL initial response.Check if you run itEPSS 0.75%Mar 27, 2026
- Medium4.3Dovecot has provided a script to use for attachment to text conversion.Check if you run itEPSS 0.30%Mar 27, 2026
- High7.5When sending invalid base64 SASL data, login process is disconnected from the auth server, causing all active authentication sessions to fail.Check if you run itEPSS 0.47%Mar 27, 2026
- High8.6Spring AI's spring-ai-bedrock-converse contains a Server-Side Request Forgery (SSRF) vulnerability in BedrockProxyChatModel when processing multimodal messages that in…Check if you run itEPSS 0.37%Mar 27, 2026
- Critical9.8In Spring AI, a SpEL injection vulnerability exists in SimpleVectorStore when a user-supplied value is used as a filter expression key.Check if you run itEPSS 1.13%Mar 27, 2026
- Medium6.5Use after free vulnerability in Softing smartLink HW-DP or smartLink HW-PN webserver allows HTTP DoS.Check if you run itEPSS 0.22%Mar 27, 2026
Sort