Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.6Notepad++ 8.9.3 contains a format string injection vulnerability in the Find Results panel handler that allows attackers to cause denial of service and information dis…Check if you run itEPSS 0.19%Apr 30, 2026
- Medium6.5IBM Langflow Desktop 1.2.0 through 1.8.4 Langflow could allow an authenticated attacker to traverse directories on the system.Check if you run itEPSS 0.27%Apr 30, 2026
- Medium4.8Traefik is an HTTP reverse proxy and load balancer.Check if you run itEPSS 0.25%Apr 30, 2026
- High7.8Traefik is an HTTP reverse proxy and load balancer.Check if you run itEPSS 0.77%Apr 30, 2026
- Medium6.0FRRouting before 10.5.3 contains an integer overflow vulnerability in seven OSPF Traffic Engineering and Segment Routing TLV parser functions where a uint16_t accumula…Check if you run itEPSS 0.22%Apr 30, 2026
- Low2.1SSCMS v7.4.0 contains a reflected cross-site scripting vulnerability in the STL processing endpoint that allows attackers to execute arbitrary JavaScript by crafting m…Check if you run itEPSS 0.20%Apr 30, 2026
- High7.5Assertion failure vulnerability in the PCO (Protocol Configuration Options) parser in the SMF (Session Management Function) component of Open5GS before v2.7.5 allows r…Check if you run itEPSS 0.33%Apr 30, 2026
- High7.5Improper neutralization of inputs used in an OS command in the FSx Windows File Server volume mounting component in Amazon ECS Agent on Windows before version 1.103.0…Check if you run itEPSS 0.55%Apr 30, 2026
- High8.1Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts.Check if you run itEPSS 0.23%Apr 30, 2026
- High8.9Insufficient Verification of Data Authenticity vulnerability in hexpm hex (Hex.RemoteConverger module) allows dependency integrity bypass via unverified lockfile checksums.Check if you run itEPSS 0.19%Apr 30, 2026
- High7.4A flaw was found in gnutls.Check if you run itEPSS 0.56%Apr 30, 2026
- Medium6.1Cross Site Scripting vulnerability in RafyMrX TOKO-ONLINE-ROTI v.1.0 allows a remote attacker to execute arbitrary code via the detail_produk.php componentCheck if you run itEPSS 0.21%Apr 30, 2026
- Medium6.1Cross Site Scripting vulnerability in andrewtch88 mvc-ecommerce v.1.0 allows a remote attacker to execute arbitrary code and obtain sensitive information via the produ…Check if you run itEPSS 0.21%Apr 30, 2026
- High8.1An issue in Krayin CRM v.2.1.5 and fixed in v.2.1.6 allows a remote attacker to execute arbitrary code via the compose email functionCheck if you run itEPSS 0.57%Apr 30, 2026
- Medium5.4When Keycloak is started with , the Account REST API is only partially disabled.Check if you run itEPSS 0.23%Apr 30, 2026
- High7.5U-SPEED N300 router V1.0.0 does not implement rate limiting or account lockout protections on the /api/login endpoint.Check if you run itEPSS 0.35%Apr 30, 2026
- High8.8A Cross-Site Request Forgery (CSRF) vulnerability exists in the web management interface of the Dbit N300 T1 Pro wireless router V1.0.0.Check if you run itEPSS 0.16%Apr 30, 2026
- High7.2This CVE record was assigned not following CNA/CVE rules and is not considered a valid vulnerability by the Pallets Click project.Check if you run itEPSS 0.90%Apr 30, 2026
- Medium5.5A vulnerability in the assisted-service REST API, an optional Assisted Installer (assisted-service) component in the Multicluster Engine (MCE), allows an authenticated…Check if you run itEPSS 0.19%Apr 30, 2026
- High7.5The Otter Blocks plugin for WordPress is vulnerable to Purchase Verification Bypass in all versions up to, and including, 3.1.4.Check if you run itEPSS 0.32%Apr 30, 2026
- High7.7Unauthenticated attackers can exploit a weakness in the XML parser functionality of Lobster_pro prior to version 4.12.6-GA.Check if you run itEPSS 0.47%Apr 30, 2026
- Medium5.9Dancer::Session::Abstract versions through 1.3522 for Perl generates session ids insecurely.Check if you run itEPSS 0.36%Apr 30, 2026
- High7.5In JetBrains IntelliJ IDEA before 2024.3.7.1, 2025.1.7.1, 2025.2.6.2, 2025.3.4.1, 2026.1.1 reading arbitrary local files was possible via built-in web serverCheck if you run itEPSS 0.40%Apr 30, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: cifs: some missing initializations on replay In several places in the code, we have a label to sign…Check if you run itEPSS 0.17%Apr 30, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: xen/privcmd: fix double free via VMA splitting privcmd_vm_ops defines .close (privcmd_close), but n…Check if you run itEPSS 0.18%Apr 30, 2026
Sort