Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.2SEPPmail Secure Email Gateway before version 15.0.1 does not properly sanitize the headers from S/MIME protected MIME entities, allowing an attacker to control trusted headers.Check if you run itEPSS 0.38%Mar 4, 2026
- Critical9.3The GINA web interface in SEPPmail Secure Email Gateway before version 15.0.1 does not properly check attachment filenames in GINA-encrypted emails, allowing an attack…Check if you run itEPSS 0.48%Mar 4, 2026
- High8.8WARNING: Users of 6.x should upgrade to 6.2.4 or later as the fix was missed in previous 6.x releases.Check if you run itEPSS 0.79%Mar 4, 2026
- Medium5.3A path traversal vulnerability exists in the /IDC_Logging/checkifdone.cgi script in International Datacasting Corporation (IDC) SFX Series SuperFlex Satellite Receiver…Check if you run itEPSS 0.82%Mar 4, 2026
- Medium5.4HomeBox is a home inventory and organization system.Check if you run itEPSS 0.25%Mar 3, 2026
- Medium5.1OpenSTAManager is an open source management software for technical assistance and invoicing.Check if you run itEPSS 0.26%Mar 3, 2026
- Medium6.5IBM webMethods API Gateway (on-prem) 10.11 through 10.11_Fix3210.15 to 10.15_Fix2711.1 to 11.1_Fix7 IBM webMethods API Management (on-prem) fails to properly validate…Check if you run itEPSS 0.47%Mar 3, 2026
- Low1.3A vulnerability was determined in Tuya App and SDK 24.07.11 on Android.Check if you run itEPSS 0.46%Mar 3, 2026
- Medium6.9AFFiNE is an open-source, all-in-one workspace and an operating system.Check if you run itEPSS 0.30%Mar 2, 2026
- Critical9.9ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI.Check if you run itEPSS 0.61%Mar 2, 2026
- Medium6.9Chamilo is a learning management system.Check if you run itEPSS 0.20%Mar 2, 2026
- Medium5.1Chamilo is a learning management system.Check if you run itEPSS 0.19%Mar 2, 2026
- Medium6.1A reflected Cross-Site Scripting (XSS) vulnerability in the RaiseError function of Skrol29 TbsZip version 2.17 and earlier allows remote attackers to execute arbitrary…Check if you run itEPSS 0.40%Mar 2, 2026
- Critical9.8WPEverest user_registration_\&_membership Improper Privilege ManagementPatch nowKEVEPSS 27.99%Mar 2, 2026
- Medium6.1PMD is an extensible multilanguage static code analyzer.Check if you run itEPSS 0.38%Feb 27, 2026
- Medium6.5HTTP::Session2 versions through 1.09 for Perl does not validate the format of user provided session ids, enabling code injection or other impact depending on session backend.Check if you run itEPSS 0.42%Feb 27, 2026
- Medium6.5HTTP::Session2 versions before 1.12 for Perl for Perl may generate weak session ids using the rand() function.Check if you run itEPSS 0.50%Feb 27, 2026
- Medium5.1SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a reflected cross-site scripting vulnerability in the management interface where user input is not p…Check if you run itEPSS 0.28%Feb 27, 2026
- Critical9.8The Listee theme for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.1.6.Check if you run itEPSS 0.60%Feb 27, 2026
- Medium6.5Net::CIDR versions before 0.24 for Perl mishandle leading zeros in IP CIDR addresses, which may have unspecified impact.Check if you run itEPSS 0.34%Feb 27, 2026
- High7.5Crypt::SysRandom::XS versions before 0.010 for Perl is vulnerable to a heap buffer overflow in the XS function random_bytes().Check if you run itEPSS 0.54%Feb 27, 2026
- High8.2Apache::SessionX versions through 2.01 for Perl create insecure session id.Check if you run itEPSS 0.21%Feb 27, 2026
- Medium4.9Discourse is an open source discussion platform.Check if you run itEPSS 0.41%Feb 26, 2026
- Medium5.4A reflected Cross-Site Scripting (XSS) vulnerability exists in the register.php backend script of PuneethReddyHC Event Management System 1.0.Check if you run itEPSS 0.20%Feb 26, 2026
- Low2.3Some HTTP security headers are not properly set by the web server when sending responses to the client application.Check if you run itEPSS 0.15%Feb 26, 2026