Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5FontForge v20230101 was discovered to contain a memory leak via the utf7toutf8_copy function at /fontforge/sfd.c.Check if you run itEPSS 0.26%Oct 23, 2025
- High7.5Audiofile v0.3.7 was discovered to contain a NULL pointer dereference via the ModuleState::setup function.Check if you run itEPSS 0.36%Oct 23, 2025
- Medium6.5FontForge v20230101 was discovered to contain a memory leak via the component DlgCreate8.Check if you run itEPSS 0.26%Oct 23, 2025
- Medium6.6pypdf is a free and open-source pure-python PDF library.Check if you run itEPSS 0.44%Oct 22, 2025
- Medium6.6pypdf is a free and open-source pure-python PDF library.Check if you run itEPSS 0.44%Oct 22, 2025
- Medium6.5Authlib is a Python library which builds OAuth and OpenID Connect servers.Check if you run itEPSS 0.46%Oct 22, 2025
- Medium5.7OpenBao is an open source identity-based secrets management system.Check if you run itEPSS 0.33%Oct 22, 2025
- High7.2Admidio is an open-source user management solution.Check if you run itEPSS 0.43%Oct 22, 2025
- High8.7BookLore is a self-hosted web app for organizing and managing personal book collections.Check if you run itEPSS 0.43%Oct 22, 2025
- Medium6.9VDO.Ninja is a tool that brings remote video feeds into OBS or other studio software via WebRTC.Check if you run itEPSS 1.15%Oct 22, 2025
- Medium6.9FastGPT is an AI Agent building platform.Check if you run itEPSS 0.24%Oct 22, 2025
- High8.2aiomysql is a library for accessing a MySQL database from the asyncio.Check if you run itEPSS 0.39%Oct 22, 2025
- Low2.0Missing Authorization in Collection Provider component in the Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 through 2025.Q2.9, 2025.Q1.0 through 2025.Q1.16, 202Check if you run itEPSS 0.27%Oct 22, 2025
- High8.1Hono is a Web application framework that provides support for any JavaScript runtime.Check if you run itEPSS 0.38%Oct 22, 2025
- Medium5.7OpenBao is an open source identity-based secrets management system.Check if you run itEPSS 0.32%Oct 22, 2025
- Medium4.8A reflected cross-site scripting (XSS) vulnerability, resulting from a regression, has been identified in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q2.0 throughCheck if you run itEPSS 0.24%Oct 22, 2025
- Medium6.4A container privilege escalation flaw was found in certain AMQ Broker images.Check if you run itEPSS 0.21%Oct 22, 2025
- Medium5.4Software which sets SO_REUSEPORT_LB on a socket and then connects it to a host will not directly observe any problems.Check if you run itEPSS 0.21%Oct 22, 2025
- Medium5.3Jira Align is vulnerable to an authorization issue.Check if you run itEPSS 0.21%Oct 22, 2025
- Medium5.3Jira Align is vulnerable to an authorization issue.Check if you run itEPSS 0.21%Oct 22, 2025
- Medium5.3Jira Align is vulnerable to an authorization issue.Check if you run itEPSS 0.21%Oct 22, 2025
- Medium5.3Jira Align is vulnerable to an authorization issue.Check if you run itEPSS 0.21%Oct 22, 2025
- Medium5.3Jira Align is vulnerable to an authorization issue.Check if you run itEPSS 0.18%Oct 22, 2025
- Medium5.3Jira Align is vulnerable to an authorization issue.Check if you run itEPSS 0.21%Oct 22, 2025
- Medium5.3Jira Align is vulnerable to an authorization issue.Check if you run itEPSS 0.21%Oct 22, 2025
Sort