Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.8A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0.Check if you run itEPSS 0.46%Apr 20, 2025
- Medium4.8A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0.Check if you run itEPSS 0.39%Apr 20, 2025
- Low2.9libheif before 1.19.6 has a NULL pointer dereference in ImageItem_Grid::get_decoder in image-items/grid.cc because a grid image can reference a nonexistent image item.Check if you run itEPSS 0.44%Apr 20, 2025
- Low2.9libheif before 1.19.6 has a NULL pointer dereference in ImageItem_iden in image-items/iden.cc.Check if you run itEPSS 0.32%Apr 20, 2025
- Low2.9In LibRaw before 0.21.4, tag 0x412 processing in phase_one_correct in decoders/load_mfbacks.cpp does not enforce minimum w0 and w1 values.Check if you run itEPSS 0.42%Apr 20, 2025
- Low2.9In LibRaw before 0.21.4, phase_one_correct in decoders/load_mfbacks.cpp allows out-of-buffer access because split_col and split_row values are not checked in 0x041f tag processing.Check if you run itEPSS 0.45%Apr 20, 2025
- Low2.9In LibRaw before 0.21.4, phase_one_correct in decoders/load_mfbacks.cpp has out-of-bounds reads for tag 0x412 processing, related to large w0 or w1 values or the frac and mult calcCheck if you run itEPSS 0.44%Apr 20, 2025
- Low2.9In LibRaw before 0.21.4, metadata/tiff.cpp has an out-of-bounds read in the Fujifilm 0xf00c tag parser.Check if you run itEPSS 0.44%Apr 20, 2025
- Low2.2TwsCachedXPathAPI in Convertigo versions before 8.3.11 did not restrict commons-jxpath functions, which could allow expression injection in contexts where an attacker can influenceCheck if you run itEPSS 0.36%Apr 20, 2025
- Medium4.9QMarkdown (aka quasar-ui-qmarkdown) before 2.0.5 allows XSS via headers even when when no-html is set.Check if you run itEPSS 0.21%Apr 20, 2025
- Medium4.1open_actions.py in kitty before 0.41.0 does not ask for user confirmation before running a local executable file that may have been linked from an untrusted document (e.g., a documCheck if you run itEPSS 0.19%Apr 20, 2025
- Medium5.8In Infodraw Media Relay Service (MRS) 7.1.0.0, the MRS web server (on port 12654) allows reading arbitrary files via ../ directory traversal in the username field.Check if you run itEPSS 0.92%Apr 20, 2025
- Medium5.3GNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows unauthenticated attackers to create lists via the /mailman/create endpoint.Check if you run itEPSS 0.48%Apr 20, 2025
- Medium5.4GNU Mailman 2.1.39, as bundled in cPanel (and WHM), in certain external archiver configurations, allows unauthenticated attackers to execute arbitrary OS commands via shell metachaCheck if you run itEPSS 0.60%Apr 20, 2025
- Medium5.8GNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows unauthenticated attackers to read arbitrary files via ../ directory traversal at /mailman/private/mailman (aka the privatCheck if you run itEPSS 1.41%Apr 20, 2025
- Medium5.3The KnowBe4 Security Awareness Training application before 2020-01-10 contains a redirect function that does not validate the destination URL before redirecting.Check if you run itEPSS 0.26%Apr 20, 2025
- Medium6.1The KnowBe4 Security Awareness Training application before 2020-01-10 allows reflected XSS.Check if you run itEPSS 0.29%Apr 20, 2025
- High8.7A vulnerability was found in Tenda W12 and i24 3.0.0.4(2887)/3.0.0.5(3644) and classified as critical.Check this weekEPSS 12.69%Apr 19, 2025
- Medium6.9A vulnerability has been found in PHPGurukul Men Salon Management System 1.0 and classified as critical.Check if you run itEPSS 0.56%Apr 19, 2025
- Medium5.3A vulnerability, which was classified as critical, has been found in SourceCodester Online Eyewear Shop 1.0.Check if you run itEPSS 0.53%Apr 19, 2025
- Medium5.1A vulnerability classified as critical was found in westboy CicadasCMS 2.0.Check if you run itEPSS 6.15%Apr 19, 2025
- Medium5.3A vulnerability has been found in zhenfeng13 My-BBS 1.0 and classified as problematic.Check if you run itEPSS 0.32%Apr 19, 2025
- Medium5.3A vulnerability, which was classified as critical, was found in zhenfeng13 My-BBS 1.0.Check if you run itEPSS 0.54%Apr 19, 2025
- Medium4.8A vulnerability, which was classified as problematic, has been found in dazhouda lecms up to 3.0.3.Check if you run itEPSS 0.34%Apr 19, 2025
- Medium4.8A vulnerability classified as critical was found in sarrionandia tournatrack up to 4c13a23f43da5317eea4614870a7a8510fc540ec.Check if you run itEPSS 0.23%Apr 19, 2025
Sort