Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Amon2 versions before 6.17 for Perl use an insecure random_string implementation for security functions.Check if you run itEPSS 0.52%Mar 28, 2026
- Critical9.9Hackage package metadata stored XSS vulnerabilityCheck if you run itEPSS 0.43%Mar 28, 2026
- Critical9.1Forge (also called ) is a native implementation of Transport Layer Security in JavaScript.Check if you run itEPSS 0.50%Mar 27, 2026
- High8.8A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Actions.php file (specifically the save_category action).Check if you run itEPSS 0.46%Mar 27, 2026
- Critical9.8A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Actions.php file (specifically the save_customer action).Check if you run itEPSS 0.50%Mar 27, 2026
- High8.8A SQL Injection vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Actions.php file (specifically the save_user action).Check if you run itEPSS 0.46%Mar 27, 2026
- Medium5.4A Stored Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Category management module within the admin panel.Check if you run itEPSS 0.24%Mar 27, 2026
- High8.7A memory leak exists in the Grassroots DICOM library (GDCM).Check if you run itEPSS 0.61%Mar 26, 2026
- High8.8Sharp is a content management framework built for Laravel as a package.Check if you run itEPSS 0.57%Mar 26, 2026
- Medium5.3PrestaShop is an open source e-commerce web application.Check if you run itEPSS 0.33%Mar 26, 2026
- Medium4.3iCalendar is a Ruby library for dealing with iCalendar files in the iCalendar format defined by RFC-5545.Check if you run itEPSS 0.37%Mar 26, 2026
- Medium6.5A flaw was found in GIMP.Check if you run itEPSS 0.48%Mar 26, 2026
- High7.5The DataRow.Decode function fails to properly validate field lengths.Check if you run itEPSS 0.65%Mar 26, 2026
- High7.5The Delete function fails to properly validate offsets when processing malformed JSON input.Check if you run itEPSS 0.97%Mar 26, 2026
- High7.5The msgpack decoder fails to properly validate the input buffer length when processing truncated fixext data (format codes 0xd4-0xd8).Check if you run itEPSS 0.69%Mar 26, 2026
- High8.8Ory Polis, formerly known as BoxyHQ Jackson, bridges or proxies a SAML login flow to OAuth 2.0 or OpenID Connect.Check if you run itEPSS 0.42%Mar 26, 2026
- Medium6.5ORY Oathkeeper is an Identity & Access Proxy (IAP) and Access Control Decision API that authorizes HTTP requests based on sets of Access Rules.Check if you run itEPSS 0.28%Mar 26, 2026
- Medium5.3Syft is a a CLI tool and Go library for generating a Software Bill of Materials (SBOM) from container images and filesystems.Check if you run itEPSS 0.52%Mar 26, 2026
- Medium6.5Kirby CMS through 5.1.4 allows an authenticated user with 'Editor' permissions to cause a persistent Denial of Service (DoS) via a malformed image upload.Check if you run itEPSS 0.57%Mar 26, 2026
- High8.5Vulnerability related to an unquoted service path in Small HTTP Server 3.06.36, specifically affecting the executable located at 'C:\Program Files (x86)\shttps_mg\http…Check if you run itEPSS 0.15%Mar 26, 2026
- Medium6.5Responsive Plus Ajax Action Arbitrary Shortcode Execution VulnerabilityPatch nowKEVEPSS 0.32%Mar 26, 2026
- Critical9.8Plack::Middleware::Session::Cookie versions through 0.21 for Perl allows remote code execution.Check if you run itEPSS 0.83%Mar 26, 2026
- Medium5.5IBM Concert 1.0.0 through 2.2.0 could allow an attacker to access sensitive information in memory due to the buffer not properly clearing resources.Check if you run itEPSS 0.17%Mar 25, 2026
- High8.7Multiple Stored XSS vulnerabilities exist in Seafile Server version 13.0.15,13.0.16-pro,12.0.14 and prior and fixed in 13.0.17, 13.0.17-pro, and 12.0.20-pro, via the S…Check if you run itEPSS 0.46%Mar 25, 2026
- Medium4.6Mattermost versions 11.2.x <= 11.2.2, 10.11.x <= 10.11.10, 11.4.x <= 11.4.0, 11.3.x <= 11.3.1 fail to properly validate CSRF tokens in the /api/v4/access_control_polic…Check if you run itEPSS 0.22%Mar 25, 2026