Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7BrainyCP 1.0 contains an authenticated remote code execution vulnerability that allows logged-in users to inject arbitrary commands through the crontab configuration interface.Check if you run itEPSS 1.11%Dec 19, 2025
- Medium5.9FastAPI Users allows users to quickly add a registration and authentication system to their FastAPI project.Check if you run itEPSS 0.26%Dec 19, 2025
- Medium4.7There is an HTML injection issue in Esri ArcGIS Web AppBuilder developer edition versions prior to 2.30 that allows a remote, unauthenticated attacker to potentially entice a userCheck if you run itEPSS 0.33%Dec 19, 2025
- Medium6.3Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Quest Coexistence Manager for Notes (Free/Busy Connector modules) allows HTTP RequCheck if you run itEPSS 0.50%Dec 19, 2025
- Medium6.9A vulnerability was identified in itsourcecode Student Management System 1.0.Check if you run itEPSS 0.39%Dec 19, 2025
- Medium6.9A vulnerability was detected in code-projects Simple Blood Donor Management System 1.0.Check if you run itEPSS 0.38%Dec 19, 2025
- None0.0DO NOT USE THIS CVE RECORD.Check if you run itEPSS 0.00%Dec 19, 2025
- None0.0DO NOT USE THIS CVE RECORD.Check if you run itEPSS 0.00%Dec 19, 2025
- None0.0DO NOT USE THIS CVE RECORD.Check if you run itEPSS 0.00%Dec 19, 2025
- None0.0DO NOT USE THIS CVE RECORD.Check if you run itEPSS 0.00%Dec 19, 2025
- None0.0DO NOT USE THIS CVE RECORD.Check if you run itEPSS 0.00%Dec 19, 2025
- None0.0DO NOT USE THIS CVE RECORD.Check if you run itEPSS 0.00%Dec 19, 2025
- Medium6.9A security vulnerability has been detected in code-projects Simple Blood Donor Management System 1.0.Check if you run itEPSS 0.38%Dec 19, 2025
- Medium4.8A security flaw has been discovered in floooh sokol up to 33e2271c431bf21de001e972f72da17a984da932.Check if you run itEPSS 0.22%Dec 19, 2025
- Medium5.5A vulnerability was identified in WebAssembly Binaryen up to 125.Check if you run itEPSS 0.21%Dec 19, 2025
- High7.1A vulnerability was determined in WebAssembly Binaryen up to 125.Check if you run itEPSS 0.21%Dec 19, 2025
- Medium5.3CVAT is an open source interactive video and image annotation tool for computer vision.Check if you run itEPSS 0.29%Dec 19, 2025
- High7.1Langflow is a tool for building and deploying AI-powered agents and workflows.Check if you run itEPSS 5.79%Dec 19, 2025
- High7.7Langflow is a tool for building and deploying AI-powered agents and workflows.Check if you run itEPSS 6.30%Dec 19, 2025
- Low0.6Orejime is a consent manager that focuses on accessibility.Check if you run itEPSS 0.22%Dec 19, 2025
- High7.4ArcSearch for Android versions prior to 1.12.6 could display a different domain in the address bar than the content being shown, enabling address bar spoofing after user interactioCheck if you run itEPSS 0.23%Dec 19, 2025
- High7.5ArcSearch for iOS versions prior to 1.45.2 could display a different domain in the address bar than the content being shown after an iframe-triggered URI-scheme navigation, increasCheck if you run itEPSS 0.27%Dec 19, 2025
- Critical9.7Dive is an open-source MCP Host Desktop Application that enables integration with function-calling LLMs.Check if you run itEPSS 0.57%Dec 19, 2025
- Medium6.4pluginsGLPI's Database Inventory Plugin "manages" the Teclib' inventory agents in order to perform an inventory of the databases present on the workstation.Check if you run itEPSS 0.32%Dec 19, 2025
- Medium6.8Gotham Gaia application was found to be exposing multiple unauthenticated endpoints.Check if you run itEPSS 0.23%Dec 19, 2025
Sort