Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5The Dial and LookupPort functions panic on Windows when provided with an input containing a NUL (0).Check if you run itEPSS 0.63%May 7, 2026
- Medium6.1If a trusted template author were to write a tag containing an empty 'type' attribute or a 'type' attribute with an ASCII whitespace, the execution of the template wou…Check if you run itEPSS 0.37%May 7, 2026
- Medium5.3ReverseProxy can forward queries containing parameters not visible to Rewrite functions.Check if you run itEPSS 0.39%May 7, 2026
- Medium6.1CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a tag's attribute.Check if you run itEPSS 0.31%May 7, 2026
- Low1.9A vulnerability was identified in OSGeo gdal up to 3.13.0dev-4.Check if you run itEPSS 0.24%May 7, 2026
- Critical9.8GitPython is a python library used to interact with Git repositories.Check if you run itEPSS 0.57%May 7, 2026
- High7.8Notepad Next is a cross-platform, reimplementation of Notepad++.Check if you run itEPSS 0.24%May 7, 2026
- High7.1FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.Check if you run itEPSS 0.17%May 7, 2026
- High7.6FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.Check if you run itEPSS 0.17%May 7, 2026
- Medium5.4FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.Check if you run itEPSS 0.26%May 7, 2026
- Critical9.1FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.Check if you run itEPSS 0.25%May 7, 2026
- High7.0BentoPDF is a client-side PDF toolkit that is self hostable.Check if you run itEPSS 0.36%May 7, 2026
- Critical9.8Yarbo firmware v2.3.9 contains hardcoded administrative credentials embedded in the firmware image.Check if you run itEPSS 0.53%May 7, 2026
- Critical9.1An Improper Certificate Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unauthenticated attacker to impersonate registered S…Check if you run itEPSS 0.69%May 7, 2026
- High8.8An Improper Access Control vulnerability in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote authenticated attacker to gain administrative access.Check this weekEPSS 11.20%May 7, 2026
- Medium5.4Cross-Site Scripting (XSS) vulnerability exists in Webkul Krayin CRM v2.1.5.Check if you run itEPSS 0.21%May 7, 2026
- High7.4A flaw was found in gnutls.Check if you run itEPSS 0.47%May 7, 2026
- Medium6.0Wallos is an open-source, self-hostable personal subscription tracker.Check if you run itEPSS 0.18%May 7, 2026
- High7.7Wallos is an open-source, self-hostable personal subscription tracker.Check if you run itEPSS 0.23%May 7, 2026
- Medium4.3Wallos is an open-source, self-hostable personal subscription tracker.Check if you run itEPSS 0.20%May 7, 2026
- Medium5.3Weblate is a web based localization tool.Check if you run itEPSS 0.37%May 7, 2026
- Medium6.9Uncontrolled Resource Consumption vulnerability in ericmj decimal allows unauthenticated remote Denial of Service.Check if you run itEPSS 0.48%May 7, 2026
- Medium4.3Incus is a system container and virtual machine manager.Check if you run itEPSS 0.33%May 7, 2026
- Medium6.5Incus is a system container and virtual machine manager.Check if you run itEPSS 0.41%May 7, 2026
- Medium5.3Incus is a system container and virtual machine manager.Check if you run itEPSS 0.27%May 7, 2026
Sort