Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.4EdgeEver through 1.112.0 contains a stored cross-site scripting vulnerability in setMemoDragPreview that allows attackers to inject script through notebook names or memo titles.Check if you run itEPSS 0.42%Oct 12, 2026
- Medium5.3ERPNext 9.0.0 through 16.50.0 contains a missing authorization vulnerability that allows authenticated users to view stock quantities via whitelisted batch methods.Check if you run itEPSS 0.25%Oct 12, 2026
- Low2.1A vulnerability was found in Netcore NR268 1.7.121109.Check if you run itEPSS 0.26%Oct 12, 2026
- Low2.1A weakness has been identified in itsourcecode Baptism Information Management System 1.0.Check if you run itEPSS 0.25%Oct 12, 2026
- Medium6.0Flower before 2.2.0 contains a cross-site request forgery vulnerability because Tornado xsrf_cookies is disabled and the OAuth session cookie lacks SameSite.Check if you run itEPSS 0.14%Oct 12, 2026
- High8.3Nginx UI: MCP configuration tools bypass restricted directive validation and allow secondary authenticated users to execute NJS in Nginx worker contextCheck if you run itEPSS 0.28%Oct 12, 2026
- Medium6.3Nginx UI: Auto backup name allows path traversal outside validated storage pathCheck if you run itEPSS 0.17%Oct 12, 2026
- High7.2OWASP Coraza WAF is a golang modsecurity compatible web application firewall library.Check if you run itEPSS 0.38%Oct 12, 2026
- Critical9.1NetEase Cloud Music client for Windows (cloudmusic.exe) versions 3.1.38 and 3.1.39.205426 contains a TLS certificate validation vulnerability that allows a network-adj…Check if you run itEPSS 0.15%Oct 12, 2026
- High7.2Privasys Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections.Check if you run itEPSS 0.08%Oct 12, 2026
- Medium4.3Backstage: Improper access control in backend action invocationCheck if you run itEPSS 0.24%Oct 12, 2026
- High8.3Nginx UI OTP secure-session step-up is missing on sensitive mutation routesCheck if you run itEPSS 0.34%Oct 12, 2026
- Medium6.9Tink-go 2.8.0 Keyset Validation Bypass via NewHandleWithNoSecretsCheck if you run itEPSS 0.19%Oct 12, 2026
- High7.8containerd CRI plugin: Checkpoint restore bypasses destination security contextCheck if you run itEPSS 0.11%Oct 12, 2026
- Critical9.1A flaw was found in Quarkus REST Data Panache.Check if you run itEPSS 0.39%Oct 12, 2026
- Medium6.4A flaw was found in Quay.Check if you run itEPSS 0.21%Oct 12, 2026
- Medium5.3A flaw was found in openstack-network-exporter.Check if you run itEPSS 0.31%Oct 12, 2026
- High7.4A flaw was found in openstack-network-exporter.Check if you run itEPSS 0.28%Oct 12, 2026
- Critical9.8PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.41%Oct 12, 2026
- Low2.1A flaw has been found in KusalkaSilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2.Check if you run itEPSS 0.27%Oct 12, 2026
- Low2.1A security vulnerability has been detected in SourceCodester Drug Recommendation System 1.0.Check if you run itEPSS 0.26%Oct 12, 2026
- Medium5.3copyparty FTP: upload outside defined volumes (limited path traversal)Check if you run itEPSS 0.31%Oct 12, 2026
- Medium6.5obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults.Check if you run itEPSS 0.24%Oct 12, 2026
- Medium5.2An out-of-bounds write vulnerability in the SPI host command interface of Semtech's LR11xx transceiver firmware where a crafted SPI host command with an oversized leng…Check if you run itEPSS 0.17%Oct 12, 2026
- Medium5.9Integer wraparound in psqlODBC SQLBindParameter allows an application, or an attacker who controls how many parameters the application binds on one statement, to corrupt heap memorCheck if you run itEPSS 0.22%Oct 12, 2026
Sort