Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4HireFlow v1.2 is vulnerable to Cross Site Scripting (XSS) in candidate_detail.html via the Resume or Feedback Comment fields via POST /candidates/add or POST /feedback/add.Check if you run itEPSS 0.21%May 11, 2026
- High7.3SQL Injection in MuuCMF T6 v1.9.4.20260115 allows an unauthenticated attacker to compromise the entire database, achieve unauthorized administrative access, and potent…Check if you run itEPSS 0.36%May 11, 2026
- Low2.1Cookie Request Header Injection via Unvalidated Encoder in cow_cookie:cookie/1Check if you run itEPSS 0.15%May 11, 2026
- Medium6.2grav-plugin-admin is the admin plugin for Grav is an HTML user interface that provides a convenient way to configure Grav and easily create and modify pages.Check if you run itEPSS 0.26%May 11, 2026
- High7.6Clerk JavaScript is the official JavaScript repository for Clerk authentication.Check if you run itEPSS 0.25%May 11, 2026
- High7.5In Meari IoT Cloud alert image storage on Alibaba OSS (latest observed; storage service version not disclosed), motion snapshots are retrievable without authentication…Check if you run itEPSS 0.29%May 11, 2026
- High7.5In Meari client applications embedding "com.meari.sdk" (including CloudEdge 5.5.0 build 220, Arenti 1.8.1 build 220, and related white-label <= 1.8.x), the integrated…Check if you run itEPSS 0.24%May 11, 2026
- High7.3The flash-attention project thru commit e724e2588cbe754beb97cf7c011b5e7e34119e62 (2025-13-04) contains a code injection vulnerability (CWE-94) in its training script.Check if you run itEPSS 0.25%May 11, 2026
- High7.3The flash-attention training framework thru commit e724e2588cbe754beb97cf7c011b5e7e34119e62 (2025-13-04) contains an insecure deserialization vulnerability (CWE-502) i…Check if you run itEPSS 0.22%May 11, 2026
- Medium5.7CosyVoice thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e (2025-30-21) contains an insecure deserialization vulnerability (CWE-502) in its model loading component.Check if you run itEPSS 0.11%May 11, 2026
- High7.3CosyVoice thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e (2025-30-21) contains an insecure deserialization vulnerability (CWE-502) in its gRPC server component.Check if you run itEPSS 0.22%May 11, 2026
- High7.3CosyVoice thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e (2025-30-21) contains an insecure deserialization vulnerability (CWE-502) in its average_model.py model…Check if you run itEPSS 0.22%May 11, 2026
- High7.3CosyVoice thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e (2025-30-21) contains an insecure deserialization vulnerability (CWE-502) in its make_parquet_list.py da…Check if you run itEPSS 0.21%May 11, 2026
- Low2.1A weakness has been identified in Open5GS up to 2.7.7.Check if you run itEPSS 0.38%May 11, 2026
- Medium6.9Improper restriction of excessive authentication attempts (CWE-307) in pgAdmin 4.Check if you run itEPSS 0.21%May 11, 2026
- High7.3Deserialization of untrusted data (CWE-502) in pgAdmin 4 FileBackedSessionManager.Check if you run itEPSS 0.13%May 11, 2026
- High7.1Local file inclusion (LFI) and server-side request forgery (SSRF) vulnerabilities in pgAdmin 4 LLM API configuration endpoints.Check if you run itEPSS 0.22%May 11, 2026
- High8.7SQL injection vulnerability in pgAdmin 4 Maintenance Tool.Check if you run itEPSS 0.46%May 11, 2026
- Medium4.8Stored cross-site scripting (XSS) vulnerability in pgAdmin 4 Browser Tree and Explain Visualizer modules.Check if you run itEPSS 0.16%May 11, 2026
- Critical9.4Authorization vulnerability in pgAdmin 4 server mode affecting Server Groups, Servers, Shared Servers, Background Processes, and Debugger modules.Check if you run itEPSS 0.46%May 11, 2026
- Medium6.0Corteza contains a SQL injection vulnerability in its Microsoft SQL Server (MSSQL) backend when filtering Compose records by the meta field.This issue affects corteza: 2024.9.8.Check if you run itEPSS 0.28%May 11, 2026
- Medium5.3Wagtail is an open source content management system built on Django.Check if you run itEPSS 0.26%May 11, 2026
- Medium6.5Wagtail is an open source content management system built on Django.Check if you run itEPSS 0.20%May 11, 2026
- Medium6.5Wagtail is an open source content management system built on Django.Check if you run itEPSS 0.17%May 11, 2026
- Medium4.3Wagtail is an open source content management system built on Django.Check if you run itEPSS 0.16%May 11, 2026
Sort