Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5A vulnerability was detected in sayan365 student-management-system up to 7f3c9ce7d410332335c2affac93a385485051800.Check if you run itEPSS 0.50%Jun 2, 2026
- High8.4Improper input validation in NI-PAL may allow a local authenticated user to access arbitrary system memory, potentially leading to privilege escalation.Check if you run itEPSS 0.11%Jun 2, 2026
- Medium6.9Improper input validation in the NI-PAL kernel driver may allow a local authenticated user to cause a denial of service by triggering a crash due to a NULL pointer dereference.Check if you run itEPSS 0.10%Jun 2, 2026
- High8.4An unauthenticated user with write access to the knowledge base can store an XSS payload in a knowledge base item.Check if you run itEPSS 0.42%Jun 2, 2026
- Critical9.8The ARMember Premium plugin for WordPress is vulnerable to an insecure password reset mechanism in all versions up to, and including, 7.3.1.Check if you run itEPSS 0.42%Jun 2, 2026
- Medium6.5The ARMember Premium plugin for WordPress is vulnerable to SQL Injection via the 'sSortDir_0' parameter of the AJAX action in all versions up to, and including, 7.3.1.Check if you run itEPSS 0.31%Jun 2, 2026
- High7.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.38%Jun 2, 2026
- Medium6.3Medplum before 5.1.14 contains a server-side request forgery vulnerability in the subscription worker that allows authenticated users to perform unauthorized internal…Check if you run itEPSS 0.23%Jun 2, 2026
- Medium5.9FastNetMon Community Edition through 1.2.9 contains an out-of-bounds read in the IPv4 packet parser.Check if you run itEPSS 0.27%Jun 2, 2026
- Low2.1Improper Encoding or Escaping of Output vulnerability in elixir-tesla tesla allows multipart part header injection via unescaped Content-Disposition parameter values.Check if you run itEPSS 0.27%Jun 2, 2026
- High8.2Allocation of Resources Without Limits or Throttling vulnerability in elixir-tesla tesla allows denial of service via atom table exhaustion in Tesla.Adapter.Mint.Check if you run itEPSS 0.35%Jun 2, 2026
- Low2.1Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') vulnerability in elixir-tesla tesla allows HTTP header injection via Tesl…Check if you run itEPSS 0.24%Jun 2, 2026
- High8.2Improper Handling of Case Sensitivity vulnerability in elixir-tesla tesla allows credential leakage to a third-party origin on cross-origin redirects.Check if you run itEPSS 0.49%Jun 2, 2026
- High8.2Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in elixir-tesla tesla allows a denial of service via decompression bomb in HTTP response bodies.Check if you run itEPSS 0.46%Jun 2, 2026
- Medium6.6AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.Check if you run itEPSS 0.15%Jun 2, 2026
- High7.5React Router is a router for React.Check if you run itEPSS 0.30%Jun 2, 2026
- High8.1React Router is a router for React.Check if you run itEPSS 0.42%Jun 2, 2026
- Medium6.9authentik is an open-source identity provider.Check if you run itEPSS 0.17%Jun 2, 2026
- Medium6.6React Router is a router for React.Check if you run itEPSS 0.22%Jun 2, 2026
- Critical9.8CrowCpp Crow through v1.3.1 HTTP is vulnerable to response header injection via unvalidated response header values.Check if you run itEPSS 0.33%Jun 2, 2026
- Low2.3Pterodactyl is a free, open-source game server management panel.Check if you run itEPSS 0.21%Jun 2, 2026
- Medium6.5wire-ios is an iOS client for the Wire secure messaging application.Check if you run itEPSS 0.24%Jun 2, 2026
- High7.3AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.Check if you run itEPSS 0.18%Jun 2, 2026
- High7.5React Router is a router for React.Check if you run itEPSS 0.29%Jun 2, 2026
- Medium6.1Northern.tech CFEngine Enterprise 3.24.3 before 3.24.4 and 3.27.0 before 3.27.1 allows XSS.Check if you run itEPSS 0.17%Jun 2, 2026
Sort