Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1LifeSize ClearSea 3.1.4 contains directory traversal vulnerabilities that allow authenticated attackers to download and upload arbitrary files by manipulating path par…Check if you run itEPSS 0.93%Apr 29, 2026
- High7.1VideoFlow Digital Video Protection DVP 2.10 contains an authenticated directory traversal vulnerability that allows attackers with valid credentials to disclose arbitr…Check if you run itEPSS 0.60%Apr 29, 2026
- Medium5.3VideoFlow Digital Video Protection DVP 2.10 contains an authenticated remote code execution vulnerability that allows authenticated attackers to execute arbitrary syst…Check if you run itEPSS 0.21%Apr 29, 2026
- Medium5.1MyBB Recent threads 17.0 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts by creating threads with crafted subject lines.Check if you run itEPSS 0.26%Apr 29, 2026
- High8.7BuddyPress Xprofile Custom Fields Type 2.6.3 contains a remote code execution vulnerability that allows authenticated users to delete arbitrary files by manipulating u…Check if you run itEPSS 0.74%Apr 29, 2026
- High8.6SysGauge Pro 4.6.12 contains a local buffer overflow vulnerability in the Register function that allows local attackers to overwrite the structured exception handler b…Check if you run itEPSS 0.15%Apr 29, 2026
- Medium6.9PDFunite 0.41.0 contains a buffer overflow vulnerability that allows local attackers to crash the application by processing malformed PDF files during merge operations.Check if you run itEPSS 0.18%Apr 29, 2026
- Medium6.9librsvg2-bin 2.40.13 contains a buffer overflow vulnerability that allows local attackers to cause a denial of service by processing malformed SVG files.Check if you run itEPSS 0.12%Apr 29, 2026
- High8.6Free Download Manager 2.0 Build 417 contains a local buffer overflow vulnerability in the URL import functionality that allows attackers to trigger a structured except…Check if you run itEPSS 0.15%Apr 29, 2026
- High8.6Allok Video to DVD Burner 2.6.1217 contains a stack-based buffer overflow vulnerability in the License Name field that allows local attackers to execute arbitrary code…Check if you run itEPSS 0.16%Apr 29, 2026
- High8.5Allok AVI to DVD SVCD VCD Converter 4.0.1217 contains a structured exception handling (SEH) based buffer overflow vulnerability that allows local attackers to execute…Check if you run itEPSS 0.16%Apr 29, 2026
- High8.6Easy MPEG to DVD Burner 1.7.11 contains a structured exception handling (SEH) local buffer overflow vulnerability that allows local attackers to execute arbitrary code…Check if you run itEPSS 0.16%Apr 29, 2026
- High8.8XATABoost CMS 1.0.0 contains a union-based SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code throu…Check if you run itEPSS 0.32%Apr 29, 2026
- High8.6Prime95 29.4b8 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by exploiting structured exception handling (SEH) mechanisms.Check if you run itEPSS 0.16%Apr 29, 2026
- Medium6.9Merge PACS 7.0 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions by crafting malicious HTML forms targeting the…Check if you run itEPSS 0.14%Apr 29, 2026
- High7.7AgentFlow contains an arbitrary code execution vulnerability that allows attackers to execute local Python pipeline files by supplying a user-controlled pipeline_path…Check if you run itEPSS 0.34%Apr 29, 2026
- Medium4.8AgentFlow's local web API accepts non-JSON content types on POST /api/runs and POST /api/runs/validate endpoints without enforcing application/json validation, allowin…Check if you run itEPSS 0.09%Apr 29, 2026
- Medium6.0Integer underflow in the ICMP and ICMPv6 echo reply handlers in FreeRTOS-Plus-TCP before V4.4.1 and V4.2.6 allows an adjacent network user to cause a denial of service…Check if you run itEPSS 0.22%Apr 29, 2026
- High7.1Insufficient packet validation in FreeRTOS-Plus-TCP before V4.2.6 and V4.4.1 allows an adjacent network actor to bypass all checksum and minimum-size validation by spo…Check if you run itEPSS 0.18%Apr 29, 2026
- Medium5.5A weakness has been identified in florensiawidjaja BioinfoMCP up to 7ada7918b9e515604d3c0ae264d3a9af10bf6e54.Check if you run itEPSS 0.41%Apr 29, 2026
- Medium6.5Wazuh is a free and open source platform used for threat prevention, detection, and response.Check if you run itEPSS 0.25%Apr 29, 2026
- Critical9.9Wazuh is a free and open source platform used for threat prevention, detection, and response.Check if you run itEPSS 0.40%Apr 29, 2026
- High7.1Dell/Alienware Purchased Apps, versions prior to 1.1.31.0, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability.Check if you run itEPSS 0.10%Apr 29, 2026
- Medium6.5Wazuh is a free and open source platform used for threat prevention, detection, and response.Check if you run itEPSS 0.21%Apr 29, 2026
- Medium5.5A vulnerability was identified in NousResearch hermes-agent 0.8.0.Check if you run itEPSS 0.48%Apr 29, 2026
Sort