Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.1Improper Neutralization of Parameter/Argument Delimiters vulnerability in elixir-plug plug allows an attacker to inject or override HTTP cookie attributes.Check if you run itEPSS 0.22%Jul 10, 2026
- Medium5.3Dell Unisphere for PowerMax, version(s) 10.3.0.5 and prior contain(s) an Improper Restriction of XML External Entity Reference vulnerability.Check if you run itEPSS 0.30%Jul 10, 2026
- High8.8Dell Unisphere for PowerMax, version(s) 10.3.0.5 and prior, contain(s) a Deserialization of Untrusted Data vulnerability.Check if you run itEPSS 0.86%Jul 10, 2026
- Medium6.9Plug.Parsers.MULTIPART, the multipart request-body parser used to handle file uploads and multipart forms, does not enforce its :length budget against all consumed res…Check if you run itEPSS 1.08%Jul 10, 2026
- High8.5Dell PowerFlex Manager, Version prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability.Check if you run itEPSS 0.32%Jul 10, 2026
- High7.7Dell PowerFlex Manager, Version prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability.Check if you run itEPSS 0.37%Jul 10, 2026
- Critical9.1Dell PowerFlex Manager, Version prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.Check if you run itEPSS 2.00%Jul 10, 2026
- Medium6.5Dell Unisphere for PowerMax, version(s) 10.3.0.5 and prior, contain(s) a path traversal vulnerability.Check if you run itEPSS 0.45%Jul 10, 2026
- Low2.1SQL Injection vulnerability in elixir-ecto postgrex allows an attacker who can influence a LISTEN channel name to inject SQL into the reconnect replay query, causing a…Check if you run itEPSS 0.22%Jul 10, 2026
- Medium5.1mtr is vulnerable to Out-of-bound read vulnerability in ipinfo_lookup() function.Check if you run itEPSS 0.45%Jul 10, 2026
- Critical9.0R-SOFT DMS is vulnerable to OS Command Injection in the Optical Character Recognition (OCR) module.Check if you run itEPSS 1.33%Jul 10, 2026
- High8.2R-SOFT DMS stores superadmin credentials using a non-salted nested MD5 hash.Check if you run itEPSS 0.27%Jul 10, 2026
- Low2.1LiteLLM LiteLLM Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.90%Jul 8, 2026
- High7.5Socket.IO enables bidirectional and low-latency communication for every platform.Check if you run itEPSS 0.64%Jul 8, 2026
- High8.8BerriAI LiteLLM Improper Authentication VulnerabilityPatch nowKEVEPSS 0.84%Jul 8, 2026
- Critical10.0Balbooa Forms Unrestricted Upload of File with Dangerous Type VulnerabilityPatch nowKEVEPSS 14.85%Jul 8, 2026
- High7.7Goploy: Arbitrary File Read via Path Traversal in /deploy/fileDiff allows Remote Server Compromise in github.com/zhenorzz/goployCheck if you run itEPSS 0.35%Jul 7, 2026
- High8.8A vulnerability has been identified in Fleet's agent-side deployer, which did not filter security-sensitive keys from namespaceLabels in fleet.yaml (or BundleDeploymen…Check if you run itEPSS 0.44%Jul 7, 2026
- High8.4Flyto2 Core is an execution kernel for automation and AI-agent workflows.Patch nowKEVEPSS 0.26%Jul 6, 2026
- Medium5.3Zephyr's DNS resolver detects mDNS (.local) queries in dns_resolve_name_internal() (subsys/net/lib/dns/resolve.c) with memcmp(strrchr(query, '.'), ".local", 7), which…Check if you run itEPSS 0.40%Jul 5, 2026
- Medium4.6The MAX32xxx USB device controller driver (drivers/usb/udc/udc_max32.c, compatible adi_max32_usbhs) dereferenced an endpoint buffer in its OUT and IN transfer-completi…Check if you run itEPSS 0.28%Jul 5, 2026
- High7.8Linux Kernel Unspecified VulnerabilityPatch nowKEVEPSS 0.71%Jul 4, 2026
- High7.3A flaw was found in GIMP's Paint Shop Pro (PSP) file format parser.Check if you run itEPSS 0.47%Jul 3, 2026
- High8.8Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen()Check if you run itEPSS 0.28%Jul 2, 2026
- Medium6.5Missing Authorization vulnerability in StylemixThemes Motors motors allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Motors:…Check if you run itEPSS 0.33%Jul 2, 2026
Sort