Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5A security vulnerability has been detected in yashpokharna2555 StudentManagementSystem cb2f558ddf8d19396de0f92abf2d224d46a0a203.Check if you run itEPSS 0.32%May 25, 2026
- Medium5.5A weakness has been identified in yashpokharna2555 StudentManagementSystem cb2f558ddf8d19396de0f92abf2d224d46a0a203.Check if you run itEPSS 0.32%May 25, 2026
- Low2.1A vulnerability was identified in debugmcp mcp-debugger up to 0.20.0.Check if you run itEPSS 0.44%May 25, 2026
- High7.2Improper Isolation or Compartmentalization vulnerability in Apache Syncope.Check if you run itEPSS 0.65%May 25, 2026
- Low2.0A vulnerability has been found in YunaiV yudao-cloud 2026.03.Check if you run itEPSS 0.36%May 25, 2026
- Medium5.4Firefox for iOS displayed specially crafted right-to-left (RTL) and internationalized domain names (IDNs) incorrectly in link preview UI surfaces.Check if you run itEPSS 0.20%May 25, 2026
- High8.2Allocation of Resources Without Limits or Throttling vulnerability in benoitc hackney allows Flooding.Check if you run itEPSS 0.70%May 25, 2026
- High8.7Allocation of Resources Without Limits or Throttling vulnerability in benoitc hackney allows Flooding.Check if you run itEPSS 0.85%May 25, 2026
- Medium6.0Sensitive Data Exposure vulnerability in benoitc hackney allows Retrieve Embedded Sensitive Data.Check if you run itEPSS 0.37%May 25, 2026
- Low2.1Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in benoitc hackney allows HTTP Response Splitting.Check if you run itEPSS 0.43%May 25, 2026
- High8.7Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in benoitc hackney allows Excessive Allocation.Check if you run itEPSS 0.75%May 25, 2026
- High7.1Joomla Responsive Portfolio 1.6.1 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL commands through multiple filter parameters.Check if you run itEPSS 0.28%May 25, 2026
- High7.1Joomla Component eXtroForms 2.1.5 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL commands through the filter_type…Check if you run itEPSS 0.28%May 25, 2026
- High8.8Collectric CMU 1.0 contains a boolean-based blind SQL injection vulnerability in the lang parameter that allows unauthenticated attackers to manipulate database querie…Check if you run itEPSS 0.39%May 25, 2026
- Medium6.9Notebook Pro 2.0 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the notebook name field.Check if you run itEPSS 0.14%May 25, 2026
- High8.6Flash Slideshow Maker Professional 5.20 contains a buffer overflow vulnerability in the registration dialog that allows local attackers to execute arbitrary code by ex…Check if you run itEPSS 0.18%May 25, 2026
- High8.6Socusoft 3GP Photo Slideshow 8.05 contains a buffer overflow vulnerability in the registration dialog that allows local attackers to execute arbitrary code by exploiti…Check if you run itEPSS 0.18%May 25, 2026
- High8.6SocuSoft iPod Photo Slideshow 8.05 contains a buffer overflow vulnerability in the registration dialog that allows local attackers to execute arbitrary code by overwri…Check if you run itEPSS 0.18%May 25, 2026
- High8.7Softneta MedDream PACS Server Premium 6.7.1.1 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary files by manipulatin…Check if you run itEPSS 0.78%May 25, 2026
- High8.6SocuSoft DVD Photo Slideshow Professional 8.07 contains a stack-based buffer overflow vulnerability in the registration name field that allows local attackers to execu…Check if you run itEPSS 0.18%May 25, 2026
- High8.8MedDream PACS Server Premium 6.7.1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malici…Check if you run itEPSS 0.30%May 25, 2026
- High8.8mooSocial Store Plugin 2.6 contains a blind SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries through the product parame…Check if you run itEPSS 0.35%May 25, 2026
- Medium6.9Admidio 3.3.5 contains a cross-site request forgery vulnerability that allows low-privilege users to increase their permissions by exploiting improper origin checking.Check if you run itEPSS 0.19%May 25, 2026
- Medium6.9Visual Ping 0.8.0.0 contains a buffer overflow vulnerability in input field handling that allows local attackers to crash the application by supplying oversized data.Check if you run itEPSS 0.17%May 25, 2026
- High8.7Nord VPN 6.14.31 contains a denial of service vulnerability that allows unauthenticated attackers to crash the application by submitting an excessively long string in…Check if you run itEPSS 0.39%May 25, 2026
Sort