Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8This vulnerability impacts all versions of IdentityIQ and allows an authenticated identity that is the requestor or assignee of a work item to edit the definition of a…Check if you run itEPSS 0.16%Apr 29, 2026
- High7.1Computing the MD5 checksum of a malformed BSON object under specific conditions may cause loss of availability in MongoDB server.Check if you run itEPSS 0.26%Apr 29, 2026
- High8.0A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be accessible under specific conditions.Check if you run itEPSS 0.38%Apr 29, 2026
- Low2.0A weakness has been identified in EyouCMS up to 1.7.9.Check if you run itEPSS 0.24%Apr 29, 2026
- Medium5.5A flaw has been found in fatbobman mail-mcp-bridge up to 1.3.3.Check if you run itEPSS 0.43%Apr 29, 2026
- High7.5pgjdbc is an open source postgresql JDBC Driver.Check if you run itEPSS 3.26%Apr 29, 2026
- Medium4.8Helpy contains a stored cross-site scripting vulnerability in the knowledge base Doc rendering logic.Check if you run itEPSS 0.18%Apr 29, 2026
- Medium5.1Helpy contains a stored cross-site scripting vulnerability in the post author display logic.Check if you run itEPSS 0.18%Apr 29, 2026
- High7.5An issue was discovered in libsndfile 1.2.2 IMA ADPCM codec.Check if you run itEPSS 0.50%Apr 29, 2026
- High7.8An issue in the TVicPort64.sys component of EnTech Taiwan TVicPort Product v4.0, File v5.2.1.0 allows attackers to escalate privileges via sending crafted IOCTL 0x8000…Check if you run itEPSS 0.13%Apr 29, 2026
- Medium5.5A vulnerability was detected in ezequiroga mcp-bases 357ca19c7a49a9b9cb2ef639b366f03aba8bea39/c630b8ab0f970614d42da8e566e9c0d15a16414c.Check if you run itEPSS 0.42%Apr 29, 2026
- Critical9.8TOTOLINK N200RE V5 was discovered to contain a command injection vulnerability via the macstr and bandstr parameters in the formMapDelDevice function.Check if you run itEPSS 1.13%Apr 29, 2026
- High7.5TOTOLINK A3002RU V3 <= V3.0.0-B20220304.1804 was discovered to contain a stack-based buffer overflow via the hostname parameter in the formMapDelDevice function.Check if you run itEPSS 0.31%Apr 29, 2026
- Medium6.5Jenkins Matrix Authorization Strategy Plugin 2.0-beta-1 through 3.2.9 (both inclusive) invokes parameterless constructors of classes specified in configuration when de…Check if you run itEPSS 0.25%Apr 29, 2026
- Medium4.3Missing Authorization vulnerability in Brainstorm Force Spectra ultimate-addons-for-gutenberg allows Exploiting Incorrectly Configured Access Control Security Levels.T…Check if you run itEPSS 0.17%Apr 29, 2026
- High7.7Ollama for Windows contains a Remote Code Execution vulnerability in its update mechanism due to improper handling of attacker‑controlled HTTP response headers.Check if you run itEPSS 1.05%Apr 29, 2026
- High7.7Ollama for Windows does not perform integrity or authenticity verification of downloaded update executables.Check if you run itEPSS 0.73%Apr 29, 2026
- Low3.1Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources.Check if you run itEPSS 0.24%Apr 29, 2026
- Medium6.5A WebFlux server application that processes multipart requests creates temp files for parts larger than 10 K.Check if you run itEPSS 0.34%Apr 29, 2026
- High7.1This vulnerability exists in e-Sushrut due to the use of reversible Base64 encoding for protecting sensitive data.Check if you run itEPSS 0.23%Apr 29, 2026
- High7.1This vulnerability exists in e-Sushrut due to improper authorization checks during resource access.Check if you run itEPSS 0.23%Apr 29, 2026
- High7.1This vulnerability exists in e-Sushrut due to improper access control in resource access validation.Check if you run itEPSS 0.23%Apr 29, 2026
- High8.8This vulnerability exists in e-Sushrut due to exposure of OTPs in plaintext within API responses.Check if you run itEPSS 0.23%Apr 29, 2026
- High8.8This vulnerability exists in e-Sushrut due to improper authentication logic that relies on client-side response parameters to determine authentication status.Check if you run itEPSS 0.48%Apr 29, 2026
- Medium6.1The authentication endpoint accepts user-supplied input without enforcing expected validation constraints, leading to a lack of proper output encoding.Check if you run itEPSS 0.17%Apr 29, 2026
Sort