Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Joomla Component JE Photo Gallery 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting malici…Check if you run itEPSS 0.34%Jun 1, 2026
- High8.6Arm Whois 3.11 contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by overwriting the structured exception handler.Check if you run itEPSS 0.16%Jun 1, 2026
- High7.1No-Cms 1.0 contains an SQL injection vulnerability in the order_by parameter of the manage_privilege export endpoint that allows authenticated attackers to manipulate…Check if you run itEPSS 0.27%Jun 1, 2026
- High7.1Paroiciel 11.20 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the eG…Check if you run itEPSS 0.27%Jun 1, 2026
- High7.1Paroiciel 11.20 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the zP…Check if you run itEPSS 0.27%Jun 1, 2026
- High8.8Paroiciel 11.20 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the…Check if you run itEPSS 0.34%Jun 1, 2026
- Critical9.3Arm Whois 3.11 contains a stack-based buffer overflow vulnerability that allows remote attackers to execute arbitrary code by supplying oversized input to the IP addre…Check if you run itEPSS 0.92%Jun 1, 2026
- Low2.3The DeepAI endpoint 'https://api.deepai.org/change_user_email' accepts POST requests without any CSRF protection.Check if you run itEPSS 0.16%Jun 1, 2026
- Medium5.3Nanobot prior to version 0.2.1 contains a denial of service vulnerability in the Matrix channel media download handler that allows authenticated room members to exhaus…Check if you run itEPSS 0.47%Jun 1, 2026
- High7.0Nanobot prior to version 0.2.1 contains a server-side request forgery vulnerability in the Microsoft Teams channel handler that allows remote attackers to exfiltrate B…Check if you run itEPSS 0.66%Jun 1, 2026
- Medium5.3Nanobot prior to version 0.2.1 contains a server-side request forgery vulnerability in the web_fetch tool that allows remote attackers to reach internal or private net…Check if you run itEPSS 0.49%Jun 1, 2026
- High8.7Banana Slides through 0.4.0, patched in commit e8bc490, contains a path traversal vulnerability in the generate_image() function within the AI service backend that all…Check if you run itEPSS 0.60%Jun 1, 2026
- High7.2CodexBar prior to 0.32.0 contains an insecure temporary file handling vulnerability that allows local attackers to access sensitive credentials or tamper with build ar…Check if you run itEPSS 0.17%Jun 1, 2026
- High7.5CodexBar prior to 0.32.0 contains a privilege escalation vulnerability in the CLI installer that allows local attackers to execute arbitrary commands as root by exploi…Check if you run itEPSS 0.48%Jun 1, 2026
- High8.2FlexRIC v2.0.0 allows a single SCTP connection to bind multiple xapp_ids by sending multiple E42_SETUP_REQUESTs.Check if you run itEPSS 0.53%Jun 1, 2026
- Low2.1A security flaw has been discovered in code-projects Hotel and Tourism Reservation System 1.0.Check if you run itEPSS 0.34%Jun 1, 2026
- Medium5.5A vulnerability was identified in code-projects Hotel and Tourism Reservation System 1.0.Check if you run itEPSS 0.50%Jun 1, 2026
- High7.5A NULL pointer dereference in the ext4_dir_en_get_name_len function in include/ext4_dir.h of lwext4 1.0.0 allows attackers to cause a denial of service by supplying a…Check if you run itEPSS 0.38%Jun 1, 2026
- High8.8An Improper Access Control vulnerability in Ivanti Neurons for ITSM (cloud and on-premises) allows a remote authenticated attacker to gain administrative access.Check if you run itEPSS 1.21%Jun 1, 2026
- High8.5IBM WebSphere Application Server 9.0, and 8.5 is affected by an improper validation of user-supplied data during deserialization using the SAML Web Single Sign-On component.Check if you run itEPSS 0.68%Jun 1, 2026
- Critical9.2AI Tensor Engine for ROCm (AITER) through 0.1.14 contains an unauthenticated remote code execution vulnerability in the MessageQueue.recv() function within shm_broadca…Check if you run itEPSS 1.51%Jun 1, 2026
- High8.8CloakBrowser is a tool to bypass bot detection tests.Check if you run itEPSS 0.65%Jun 1, 2026
- High7.1Nextcloud is an open source content collaboration platform.Check if you run itEPSS 0.49%Jun 1, 2026
- Medium5.9Nextcloud is an open source content collaboration platform.Check if you run itEPSS 0.43%Jun 1, 2026
- Medium5.9Nextcloud is an open source content collaboration platform.Check if you run itEPSS 0.43%Jun 1, 2026
Sort