Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low3.1The structure_data endpoint in the Airflow UI returned external dependency graph nodes for linked Dags without checking whether the caller had read permission on those linked Dags.Check if you run itEPSS 0.52%Jun 1, 2026
- High7.2A bug in the login redirect route in Apache Airflow allowed authenticated users to craft URLs that bypassed the check, enabling redirection from a trusted Airflow doma…Check if you run itEPSS 0.76%Jun 1, 2026
- Medium6.5A Dag author could either (a) create a symlink under their task's log directory pointing to an arbitrary file readable by the API server process (read-path attack — e.g.Check if you run itEPSS 0.76%Jun 1, 2026
- Medium6.4SOPlanning does not verify uploaded file extension.Check if you run itEPSS 0.43%Jun 1, 2026
- High8.7SOPlanning is vulnerable to SQL Injection across multiple endpoints and parameters.Check if you run itEPSS 0.36%Jun 1, 2026
- Medium5.1SOPlanning is vulnerable to Stored Cross-Site Scripting (XSS) via /process/upload_backup endpoint.Check if you run itEPSS 0.40%Jun 1, 2026
- High8.8SOPlanning does not enforce authorization for backup functionalities.Check if you run itEPSS 0.43%Jun 1, 2026
- High8.5Privilege chaining issue exists in ServerView Agents for Windows V11.60.04 and earlier.Check if you run itEPSS 0.14%Jun 1, 2026
- High8.5Incorrect permission assignment for critical resource issue exists in ServerView Agents for Windows V11.60.04 and earlier.Check if you run itEPSS 0.14%Jun 1, 2026
- Low2.1A weakness has been identified in itsourcecode Content Management System 1.0.Check if you run itEPSS 0.25%Jun 1, 2026
- Low2.1A security flaw has been discovered in jeecgboot The server processes these URLs up to 3.9.1.Check if you run itEPSS 0.27%Jun 1, 2026
- Low2.1A vulnerability was identified in JeecgBoot up to 3.9.2.Check if you run itEPSS 0.27%Jun 1, 2026
- Low2.1A vulnerability was determined in JeecgBoot up to 3.9.2.Check if you run itEPSS 0.27%Jun 1, 2026
- Medium6.5A bug in the GET REST API endpoint in Apache Airflow allowed an authenticated UI/API user with Connection-read permission to retrieve secrets stored in a Connection's…Check if you run itEPSS 0.66%Jun 1, 2026
- High8.8It was identified that the LDAP client implementation in version 2.1.7 does not verify if the server certificate matches the intended LDAP hostname.Check if you run itEPSS 0.26%Jun 1, 2026
- Low2.0A vulnerability was detected in Mettle sendportal up to 3.0.1.Check if you run itEPSS 0.20%Jun 1, 2026
- Low1.9A security vulnerability has been detected in Assimp up to 6.0.4.Check if you run itEPSS 0.11%Jun 1, 2026
- Low1.9A weakness has been identified in Assimp up to 6.0.4.Check if you run itEPSS 0.11%Jun 1, 2026
- Low1.9A vulnerability was identified in Assimp up to 6.0.4.Check if you run itEPSS 0.13%Jun 1, 2026
- Low2.0A vulnerability was found in raisulislamg4 student_management_system_by_php up to 310d950e09013d5133c6b9210aff9444382d16d1.Check if you run itEPSS 0.20%Jun 1, 2026
- Medium5.5A vulnerability has been found in raisulislamg4 student_management_system_by_php up to 310d950e09013d5133c6b9210aff9444382d16d1.Check if you run itEPSS 0.26%Jun 1, 2026
- Medium5.5A flaw has been found in raisulislamg4 student_management_system_by_php up to 310d950e09013d5133c6b9210aff9444382d16d1.Check if you run itEPSS 0.26%Jun 1, 2026
- Medium5.5A vulnerability was detected in raisulislamg4 student_management_system_by_php up to 310d950e09013d5133c6b9210aff9444382d16d1.Check if you run itEPSS 0.26%Jun 1, 2026
- Low2.1A weakness has been identified in NousResearch hermes-agent up to 2026.4.30.Check if you run itEPSS 0.23%Jun 1, 2026
- Medium6.5An improper neutralization of active SVG content in OTRS or ((OTRS)) Community Edition ticket article rendering allows attackers to inject specially crafted SVG payloa…Check if you run itEPSS 0.49%Jun 1, 2026
Sort