Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5An integer underflow in the BGPUpdate.DecodeFromBytes function (/bgp/bgp.go) of gobgp v4.3.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafte…Check if you run itEPSS 0.28%Jun 3, 2026
- Critical9.0RockRMS v16.13 and before v.17.7.0 is vulnerable to Cross Site Scripting (XSS) via Social Media links in user profile.Check if you run itEPSS 0.30%Jun 3, 2026
- Critical9.8An OS command injection vulnerability in the app.py component of openlabs docker-wkhtmltopdf-aas up to commit 9f50579 allows attackers to execute arbitrary commands vi…Check if you run itEPSS 1.49%Jun 3, 2026
- High7.8A DLL hijacking vulnerability in Wassimulator (GitHub) CactusViewer v2.3.0 allows attackers to escalate privileges and execute arbitrary code via a crafted DLL.Check if you run itEPSS 0.14%Jun 3, 2026
- Medium5.1backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of Laravel packages that help users build custom administration panels.Check if you run itEPSS 0.30%Jun 3, 2026
- Low2.3An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6.Check if you run itEPSS 0.27%Jun 3, 2026
- Low2.3An issue was discovered in Django 6.0 before 6.0.6 and 5.2 before 5.2.15.Check if you run itEPSS 0.15%Jun 3, 2026
- Low2.3An issue was discovered in Django 6.0 before 6.0.6 and 5.2 before 5.2.15.Check if you run itEPSS 0.24%Jun 3, 2026
- Critical9.6A vulnerability in the LightGlue model loading path of huggingface/transformers version 5.2.0 allows an attacker-controlled model repository to execute arbitrary code…Check if you run itEPSS 0.60%Jun 3, 2026
- Low2.3An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6.Check if you run itEPSS 0.37%Jun 3, 2026
- Medium6.9ProjectsAndPrograms school-management-system uses predictable credentials by generating student's and teacher's passwords solely from the user’s date of birth (e.g., 1…Check if you run itEPSS 0.25%Jun 3, 2026
- Medium5.1ProjectsAndPrograms school-management-system is vulnerable to Stored Cross‑Site Scripting (XSS) in multiple attributes of students and teachers objects.Check if you run itEPSS 0.29%Jun 3, 2026
- Medium5.3daphne before 4.2.2 reconstructs a raw HTTP request from Twisted's parsed headers and feeds it to autobahn for WebSocket handshake processing.Check if you run itEPSS 0.17%Jun 3, 2026
- High7.5daphne before 4.2.2 did not pass maxFramePayloadSize or maxMessagePayloadSize to Autobahn's WebSocketServerFactory.Check if you run itEPSS 0.33%Jun 3, 2026
- High7.5Missing input validation in the rfapiRibBi2Ri() function (rfapi_rib.c) of FRRouting (FRR) stable/10.0 to stable/10.6 allows attackers to cause a Denial of Service (DoS…Check if you run itEPSS 0.34%Jun 3, 2026
- Low2.3An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6.Check if you run itEPSS 0.37%Jun 3, 2026
- Low1.2An HTML injection vulnerability in the notification email for "Slow Redirect" and "Cloned Website" Canarytokens exists in Thinkst Applied Research Canarytokens, enabli…Check if you run itEPSS 0.20%Jun 3, 2026
- Medium6.5An out-of-bounds read in the ext4_ext_binsearch_idx function in src/ext4_extent.c of the lwext4 1.0.0 library allows attackers to cause a denial of service by supplyin…Check if you run itEPSS 0.29%Jun 3, 2026
- Medium5.5A divide-by-zero vulnerability in the ext4_block_set_lb_size function in src/ext4_blockdev.c of the lwext4 1.0.0 library allows attackers to cause a denial of service…Check if you run itEPSS 0.16%Jun 3, 2026
- Medium5.0A NULL pointer dereference in the gf_filter_pid_resolve_file_template_ex function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to…Check if you run itEPSS 0.11%Jun 3, 2026
- Medium4.3An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in Backup Task functionality in Synology Hyper Backup before 4.1.2-4036…Check if you run itEPSS 0.28%Jun 3, 2026
- Medium4.1An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in Backup.Repository webapi component in Synology Hyper Backup before 4…Check if you run itEPSS 0.30%Jun 3, 2026
- Medium5.9A cleartext transmission of sensitive information vulnerability in Synology Note Station Client before 2.2.4-703 allows man-in-the-middle attackers to obtain user credential.Check if you run itEPSS 0.13%Jun 3, 2026
- High7.8An inclusion of functionality from untrusted control sphere vulnerability in MinGW DLL component in Synology Hyper Backup Explorer before 3.0.1-0156 allows local users…Check if you run itEPSS 0.12%Jun 3, 2026
- High7.8An inclusion of functionality from untrusted control sphere vulnerability in OpenSSL configuration in Synology Active Backup for Business Recovery Media Creator before…Check if you run itEPSS 0.12%Jun 3, 2026
Sort