Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.1A vulnerability was identified in itsourcecode Content Management System 1.0.Check if you run itEPSS 0.20%Jun 1, 2026
- Medium5.5A weakness has been identified in itsourcecode Online House Rental System 1.0.Check if you run itEPSS 0.26%Jun 1, 2026
- Medium6.4The PDBM application relies on a static, hard‑coded secret embedded in the PDBM.exe executable.Check if you run itEPSS 0.09%Jun 1, 2026
- Medium5.5A security flaw has been discovered in itsourcecode Online Blood Bank Management System 1.0.Check if you run itEPSS 0.26%Jun 1, 2026
- Medium5.5A vulnerability was identified in itsourcecode Online Blood Bank Management System 1.0.Check if you run itEPSS 0.27%Jun 1, 2026
- Low2.0A vulnerability was found in SourceCodester Pharmacy Sales and Inventory System 1.0.Check if you run itEPSS 0.20%Jun 1, 2026
- Low2.0A vulnerability has been found in SourceCodester Pharmacy Sales and Inventory System 1.0.Check if you run itEPSS 0.20%Jun 1, 2026
- Low2.0A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0.Check if you run itEPSS 0.20%Jun 1, 2026
- Low2.0A vulnerability was detected in SourceCodester Pharmacy Sales and Inventory System 1.0.Check if you run itEPSS 0.20%Jun 1, 2026
- Medium5.3A vulnerability was discovered on Stormshield Network Security * 4.3.0 to 4.3.41, * 4.8.0 to 4.8.15, * 5.0.0 to 5.0.5 It is possible to execute a reflected XSS attack…Check if you run itEPSS 0.30%Jun 1, 2026
- High8.8A bug in Apache Airflow's KubernetesExecutor caused JWT tokens used by worker pods to authenticate against the Execution API to be passed to the worker container as co…Check if you run itEPSS 0.81%Jun 1, 2026
- Medium5.9Apache Airflow's EmailOperator and the underlying helpers established SMTP STARTTLS connections without verifying the remote certificate when the deployment used witho…Check if you run itEPSS 0.27%Jun 1, 2026
- High7.1Path traversal vulnerability in Apache MINA SSHD bundle sshd-git.Check if you run itEPSS 0.78%Jun 1, 2026
- Medium6.5A bug in Apache Airflow's auth manager logout handling left previously-issued JWT tokens valid after the user clicked logout in the UI: the logout flow for and did not…Check if you run itEPSS 0.60%Jun 1, 2026
- Medium4.3The Event Log detail endpoint in Apache Airflow fetched audit-log rows directly by numeric ID after only the generic Audit Log permission check, while the collection e…Check if you run itEPSS 0.57%Jun 1, 2026
- Low3.1Exploitation requires the attacker to already be an authenticated Airflow worker holding a valid Log-server JWT issued for at least one Dag.Check if you run itEPSS 0.52%Jun 1, 2026
- High7.3Apache Airflow's scheduler-side deadline-reference decoder ( ) imported and dispatched arbitrary class paths drawn from DAG-author-controlled serialized state without…Check if you run itEPSS 0.93%Jun 1, 2026
- Critical9.8Apache Solr Use of Hard-coded CredentialsPatch nowKEVEPSS 2.84%Jun 1, 2026
- Medium6.5A bug in Apache Airflow's rendered-template field handling caused nested sensitive-key masking (e.g.Check if you run itEPSS 0.52%Jun 1, 2026
- High8.8A bug in Apache Airflow's XCom PATCH endpoint allowed an authenticated UI/API user with XCom write permission on a Dag to set XCom entries under reserved key names (e.g.Check if you run itEPSS 0.95%Jun 1, 2026
- Medium6.5A bug in Apache Airflow's Variable response masker caused nested-key redaction (triggered by secret-suffixed key names like , , , ) to be bypassed when the JSON value'…Check if you run itEPSS 0.52%Jun 1, 2026
- Critical9.1Apache Airflow's official documentation at ("Passing Parameters when triggering Dags") showed a verbatim example without any quoting / sanitization warning.Check if you run itEPSS 0.59%Jun 1, 2026
- High7.5A bug in Apache Airflow's bulk Task Instances API ( ) evaluated authorization against the resolved from the URL path while operating on the / extracted from request-bo…Check if you run itEPSS 0.76%Jun 1, 2026
- Medium5.9Apache Airflow's set the JWT auth cookie without the flag, so deployments running the Airflow API server behind an HTTPS-terminating reverse proxy (e.g.Check if you run itEPSS 0.38%Jun 1, 2026
- Medium4.3The partitioned_dag_runs endpoints in the Airflow UI enforced only asset-level access control, not per-Dag authorization.Check if you run itEPSS 0.57%Jun 1, 2026
Sort