Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownstrategy11 awp_classifieds Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 5.52%Apr 1, 2026
- Medium5.4A Blind SQL Injection vulnerability exists in SourceCodester Loan Management System v1.0.Check if you run itEPSS 0.26%Mar 31, 2026
- High7.5PAGI::Middleware::Session::Store::Cookie versions through 0.001003 for Perl generates random bytes insecurely.Check if you run itEPSS 0.50%Mar 31, 2026
- High7.5An attacker might be able to trick DNSdist into allocating too much memory while processing DNS over QUIC or DNS over HTTP/3 payloads, resulting in a denial of service.Check if you run itEPSS 0.54%Mar 31, 2026
- High8.1Sereal::Encoder versions from 4.000 through 4.009_002 for Perl embeds a vulnerable version of the Zstandard library.Check if you run itEPSS 0.36%Mar 31, 2026
- High8.1Sereal::Decoder versions from 4.000 through 4.009_002 for Perl embeds a vulnerable version of the Zstandard library.Check if you run itEPSS 0.36%Mar 31, 2026
- Critical9.1Business::OnlinePayment::StoredTransaction versions through 0.01 for Perl uses an insecure secret key.Check if you run itEPSS 0.33%Mar 31, 2026
- Critical9.3SQL inyection (SQLi) vulnerability in Umami Software web application through an improperly sanitized parameter, which could allow an authenticated attacker to execute…Check if you run itEPSS 0.40%Mar 31, 2026
- Critical9.3Stored Cross-Site Scripting (XSS) in Teampass versions prior to 3.1.5.16, affecting the password manager's password import functionality at the endpoint 'redacted/inde…Check if you run itEPSS 0.23%Mar 31, 2026
- Critical9.3Blind Cross-Site Scripting (XSS) in Teampass, versions prior to 3.1.5.16, within the password manager login functionality in the 'contraseña' parameter of the login fo…Check if you run itEPSS 0.27%Mar 31, 2026
- Critical9.0CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Check if you run itEPSS 0.38%Mar 30, 2026
- Critical9.0CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Check if you run itEPSS 0.38%Mar 30, 2026
- High7.2CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Check if you run itEPSS 0.42%Mar 30, 2026
- Medium6.9Nginx UI is a web user interface for the Nginx web server.Check if you run itEPSS 0.55%Mar 30, 2026
- Critical9.8CrewAI does not properly check that Docker is still running during runtime, and will fall back to a sandbox setting that allows for RCE exploitation.Check if you run itEPSS 0.73%Mar 30, 2026
- Critical9.8CrewAI contains a server-side request forgery vulnerability that enables content acquisition from internal and cloud services, facilitated by the RAG search tools not…Check if you run itEPSS 0.49%Mar 30, 2026
- High7.8A flaw was found in virtio-win, specifically within the VirtIO Block (BLK) device.Check if you run itEPSS 0.15%Mar 30, 2026
- Medium5.5A flaw was found in virtio-win.Check if you run itEPSS 0.16%Mar 30, 2026
- High8.7An integer overflow vulnerability in the HTTP chunked transfer encoding parser in tinyproxy up to and including version 1.11.3 allows an unauthenticated remote attacke…Check if you run itEPSS 1.04%Mar 30, 2026
- Low2.1Hardcoded Password Vulnerability have been found in CENTUM.Check if you run itEPSS 0.17%Mar 30, 2026
- Critical9.8Perl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 before 5.42.2-RC1, from 5.43.0 before 5.43.9 contain a vulnerable version of Compress::Raw::Zlib.Check if you run itEPSS 0.81%Mar 29, 2026
- High8.8Ghidra versions prior to 12.0.3 improperly process annotation directives embedded in automatically extracted binary data, resulting in arbitrary command execution when…Check if you run itEPSS 0.77%Mar 29, 2026
- High8.8OpenClaw before 2026.3.11 contains an exec allowlist bypass vulnerability where matchesExecAllowlistPattern improperly normalizes patterns with lowercasing and glob ma…Check if you run itEPSS 0.72%Mar 29, 2026
- Critical9.8GRID::Machine versions through 0.127 for Perl allows arbitrary code execution via unsafe deserialization.Check if you run itEPSS 0.78%Mar 29, 2026
- Critical9.8HTTP::Session versions before 0.54 for Perl defaults to using insecurely generated session ids.Check if you run itEPSS 0.71%Mar 28, 2026