Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5Kludex Starlette HTTP Request/Response Smuggling VulnerabilityPatch nowKEVEPSS 70.29%May 26, 2026
- Low2.1A weakness has been identified in Totolink CA750-PoE 6.2c.510.Check if you run itEPSS 1.16%May 25, 2026
- High7.5Missing Authorization vulnerability in edward_plainview MyCryptoCheckout allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.30%May 25, 2026
- Low2.1A vulnerability was identified in Totolink CA750-PoE 6.2c.510.Check if you run itEPSS 1.16%May 25, 2026
- Low1.9A weakness has been identified in GNU LibreDWG up to 0.14.Check if you run itEPSS 0.18%May 25, 2026
- Medium5.3Missing Authorization vulnerability in Cornel Raiu WP Search Analytics allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.23%May 25, 2026
- Low1.9A vulnerability was identified in GNU LibreDWG up to 0.14.Check if you run itEPSS 0.15%May 25, 2026
- Low3.7PuTTY 0.71 before 0.84 has an assertion failure in ECDSA signature verification.Check if you run itEPSS 0.27%May 25, 2026
- Low3.1PuTTY 0.77 before 0.84 uses a copy of the PuTTY icon as a trust indication for TELNET data but the trust status is not cleared between proxy authentication and the main session.Check if you run itEPSS 0.22%May 25, 2026
- None0.0Apache Shiro’s Jakarta EE module used the HTTP Referer header in certain cases to issue redirect after a user login.Check if you run itEPSS 0.35%May 25, 2026
- Low2.0A vulnerability was identified in SourceCodester Student Grades Management System 1.0.Check if you run itEPSS 0.25%May 25, 2026
- Medium4.4In Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1, an unsanitized subject field in the draft restored value could lead to stored XSS/HTML/CSS injection o…Check if you run itEPSS 0.24%May 25, 2026
- High7.2Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7 has insufficient HTML sanitization that could lead to Cascading Style Sheets (CSS) injection via an SVG docu…Check if you run itEPSS 0.39%May 25, 2026
- Low3.7Roundcube Webmail 1.6.x before 1.6.16, and 1.7.x before 1.7.1 allows pre-authentication arbitrary file deletion via redis/memcache session poisoning bypass.Check if you run itEPSS 0.43%May 25, 2026
- Medium6.5In Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1, the remote image blocking feature can be bypassed via a crafted CSS var() value in an e-mail message,…Check if you run itEPSS 0.40%May 25, 2026
- Medium6.5In Roundcube Webmail 1.6.x between 1.6.14 and 1.6.16 and 1.7.x before 1.7.1, remote image blocking was not honored for URLs pointing to local/private destinations, whi…Check if you run itEPSS 0.38%May 25, 2026
- High7.5Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has insecure code evaluation logic in LDAP the autovalues option that could lead to code injection.Check if you run itEPSS 0.41%May 25, 2026
- High7.2Roundcube Webmail 1.6.x between 1.6.14 and 1.6.16,and 1.7.x before 1.7.1 has Insufficient Cascading Style Sheets (CSS) sanitization in HTML e-mail messages may lead to…Check if you run itEPSS 0.27%May 25, 2026
- High8.1Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has Pre-authentication SQL injection in the virtuser_query plugin via a preg_replace() backslash escape bypass.Patch nowKEVEPSS 1.70%May 25, 2026
- High8.9A weakness has been identified in Totolink A8000RU 7.1cu.643_b20200521.Check if you run itEPSS 1.91%May 25, 2026
- Unknownlinux-nvidia-6.8 vulnerabilitiesOpen the advisoryMay 25, 2026
- High8.9A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521.Check if you run itEPSS 1.91%May 25, 2026
- Medium5.5A vulnerability was found in yashpokharna2555 StudentManagementSystem up to cb2f558ddf8d19396de0f92abf2d224d46a0a203.Check if you run itEPSS 0.32%May 25, 2026
- Low2.1A flaw has been found in dazeb markdown-downloader up to 3d4394b34b6c99d81af817623af55e3384df5a6a.Check if you run itEPSS 0.34%May 25, 2026
- Low2.0A vulnerability was detected in yashpokharna2555 StudentManagementSystem cb2f558ddf8d19396de0f92abf2d224d46a0a203.Check if you run itEPSS 0.25%May 25, 2026
Sort