Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1WeGIA is a web manager for charitable institutions.Check if you run itEPSS 0.34%Oct 14, 2026
- High8.8WeGIA is a web manager for charitable institutions.Check if you run itEPSS 0.45%Oct 14, 2026
- Medium6.5WeGIA is a web manager for charitable institutions.Check if you run itEPSS 0.43%Oct 14, 2026
- Critical9.8WeGIA: Unauthenticated SQL Injection in cadastro_cobranca.php via "codigo" parameterCheck if you run itEPSS 0.49%Oct 14, 2026
- Critical9.8WeGIA: SQL Injection in html/socio/sistema/cadastro_cobranca.phpCheck if you run itEPSS 0.47%Oct 14, 2026
- High7.6InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates.Check if you run itEPSS 0.38%Oct 14, 2026
- Highlibcurl could accidentally return a URL for 's option containing credentials, even though neither the URL provided to libcurl nor the redirected URL did.Check if you run itEPSS 0.27%Oct 14, 2026
- HighA deeply nested multipart MIME structure constructed via the public API causes a stack overflow in libcurl during normal cleanup operations.Check if you run itEPSS 0.28%Oct 14, 2026
- Highlibcurl's TFTP state machine fails to validate state transitions against the requested transfer direction, accepting opening server responses for both reads and writes…Check if you run itEPSS 0.29%Oct 14, 2026
- CriticalWhen an FTP wildcard operation fails, libcurl omits the restoration path meant for successful listings, leaving the write callback set to the internal listing parser a…Check if you run itEPSS 0.29%Oct 14, 2026
- UnknownEnabling causes curl to advertise the raw input byte count in the literal while transmitting line-ending expanded data.Check if you run itEPSS 0.21%Oct 14, 2026
- UnknownAn authenticated HTTPS origin can supply an HSTS value that the parser accepts, but time serialization later fails to process.Check if you run itEPSS 0.29%Oct 14, 2026
- UnknownImporting a parent HSTS entry before a longer-lived child entry, silently drops the child.Check if you run itEPSS 0.29%Oct 14, 2026
- UnknownAn HTTP proxy can trick libcurl into sending the origin's credentials (Basic password, or a Negotiate/Kerberos ticket) to the proxy itself, by answering the tunnel req…Check if you run itEPSS 0.29%Oct 14, 2026
- UnknownSetting to NULL but does not disable SigV4 authentication, contrary to expectations and documentation.Check if you run itEPSS 0.25%Oct 14, 2026
- Medium6.8InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates.Check if you run itEPSS 0.45%Oct 14, 2026
- High7.1InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates.Check if you run itEPSS 0.29%Oct 14, 2026
- High8.2InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates.Check if you run itEPSS 0.42%Oct 14, 2026
- High7.2InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates.Check if you run itEPSS 0.34%Oct 14, 2026
- High7.1InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates.Check if you run itEPSS 0.36%Oct 14, 2026
- Medium5.3InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates.Check if you run itEPSS 0.28%Oct 14, 2026
- Medium4.2LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g.Check if you run itEPSS 0.21%Oct 14, 2026
- High8.8Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code.Check if you run itEPSS 0.43%Oct 14, 2026
- High7.7Radius is a cloud-native, portable application platform that makes app development easier for teams building cloud-native apps.Check if you run itEPSS 0.34%Oct 14, 2026
- Medium5.3lamp-boot 4.16.0-java17 through 4.21.2-java17 contains an insecure direct object reference vulnerability in the oauth module's /anyone/findDeptByCompany endpoint that…Check if you run itEPSS 0.21%Oct 14, 2026
Sort