Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Joomla Component JE Photo Gallery 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting malici…Check if you run itEPSS 0.34%Jun 1, 2026
- High8.6Arm Whois 3.11 contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by overwriting the structured exception handler.Check if you run itEPSS 0.16%Jun 1, 2026
- High7.1No-Cms 1.0 contains an SQL injection vulnerability in the order_by parameter of the manage_privilege export endpoint that allows authenticated attackers to manipulate…Check if you run itEPSS 0.27%Jun 1, 2026
- High7.1Paroiciel 11.20 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the eG…Check if you run itEPSS 0.27%Jun 1, 2026
- High7.1Paroiciel 11.20 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the zP…Check if you run itEPSS 0.27%Jun 1, 2026
- High8.8Paroiciel 11.20 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the…Check if you run itEPSS 0.34%Jun 1, 2026
- Critical9.3Arm Whois 3.11 contains a stack-based buffer overflow vulnerability that allows remote attackers to execute arbitrary code by supplying oversized input to the IP addre…Check if you run itEPSS 0.92%Jun 1, 2026
- Low3.7A flaw was found in gnutls.Check if you run itEPSS 0.54%Jun 1, 2026
- Low2.3The DeepAI endpoint 'https://api.deepai.org/change_user_email' accepts POST requests without any CSRF protection.Check if you run itEPSS 0.11%Jun 1, 2026
- Medium5.3Nanobot prior to version 0.2.1 contains a denial of service vulnerability in the Matrix channel media download handler that allows authenticated room members to exhaus…Check if you run itEPSS 0.27%Jun 1, 2026
- High7.0Nanobot prior to version 0.2.1 contains a server-side request forgery vulnerability in the Microsoft Teams channel handler that allows remote attackers to exfiltrate B…Check if you run itEPSS 0.38%Jun 1, 2026
- Medium5.3Nanobot prior to version 0.2.1 contains a server-side request forgery vulnerability in the web_fetch tool that allows remote attackers to reach internal or private net…Check if you run itEPSS 0.36%Jun 1, 2026
- High8.7Banana Slides through 0.4.0, patched in commit e8bc490, contains a path traversal vulnerability in the generate_image() function within the AI service backend that all…Check if you run itEPSS 0.42%Jun 1, 2026
- High7.2CodexBar prior to 0.32.0 contains an insecure temporary file handling vulnerability that allows local attackers to access sensitive credentials or tamper with build ar…Check if you run itEPSS 0.13%Jun 1, 2026
- High7.5CodexBar prior to 0.32.0 contains a privilege escalation vulnerability in the CLI installer that allows local attackers to execute arbitrary commands as root by exploi…Check if you run itEPSS 0.27%Jun 1, 2026
- High8.2FlexRIC v2.0.0 allows a single SCTP connection to bind multiple xapp_ids by sending multiple E42_SETUP_REQUESTs.Check if you run itEPSS 0.41%Jun 1, 2026
- High8.2Kiteworks is a private data network (PDN).Check if you run itEPSS 0.29%Jun 1, 2026
- Low2.1A security flaw has been discovered in code-projects Hotel and Tourism Reservation System 1.0.Check if you run itEPSS 0.34%Jun 1, 2026
- Medium5.5A vulnerability was identified in code-projects Hotel and Tourism Reservation System 1.0.Check if you run itEPSS 0.50%Jun 1, 2026
- Medium5.5A vulnerability was determined in SourceCodester SEO Meta Tag Extractor 1.0.Check if you run itEPSS 0.29%Jun 1, 2026
- Low2.1A vulnerability was found in CodeAstro Payroll System 1.0.Check if you run itEPSS 0.20%Jun 1, 2026
- Medium5.3A vulnerability has been found in DevaslanPHP project-management up to 2.0.0-beta1.Check if you run itEPSS 0.23%Jun 1, 2026
- Medium5.3A flaw has been found in DevaslanPHP project-management up to 2.0.0-beta1.Check if you run itEPSS 0.23%Jun 1, 2026
- High7.5A NULL pointer dereference in the ext4_dir_en_get_name_len function in include/ext4_dir.h of lwext4 1.0.0 allows attackers to cause a denial of service by supplying a…Check if you run itEPSS 0.38%Jun 1, 2026
- High7.1Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user space application to map sensitive SMN (System Ma…Check if you run itEPSS 0.10%Jun 1, 2026
Sort