Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1In Spring AI, having access to a shared environment can expose the ONNX model used by the application.Check if you run itEPSS 0.10%Apr 28, 2026
- High8.8SQL injection vulnerability in Spring AI's allows attackers to execute arbitrary SQL queries via crafted document IDs.Check if you run itEPSS 0.34%Apr 28, 2026
- Medium5.5A security vulnerability has been detected in ErlichLiu claude-agent-sdk-master up to b185aa7ff0d864581257008077b4010fca1747bf.Check if you run itEPSS 0.46%Apr 28, 2026
- Medium5.3The Booking Package plugin for WordPress is vulnerable to Price Manipulation in versions up to, and including, 1.7.06 This is due to the intentForStripe() function pas…Check if you run itEPSS 0.31%Apr 28, 2026
- Medium5.9In Spring AI, an attacker can bypass conversation isolation and exfiltrate sensitive memory from other users’ chat histories, including secrets and credentials, by inj…Check if you run itEPSS 0.23%Apr 28, 2026
- High8.7Penetration Testing engineers at Amazon have identified a security flaw related to request handling in the web server component that could, under certain conditions, l…Check if you run itEPSS 0.19%Apr 28, 2026
- High8.5Penetration Testing engineers at Amazon discovered a vulnerability where the camera system failed to properly validate input, allowing specially crafted requests conta…Check if you run itEPSS 0.26%Apr 28, 2026
- Medium5.3Penetration Testing engineers at Amazon have discovered a flaw where the camera system fails to properly handle data supplied in certain requests, causing a service disruption.Check if you run itEPSS 0.24%Apr 28, 2026
- Medium5.5A weakness has been identified in BrowserOperator browser-operator-core up to 0.6.0.Check if you run itEPSS 0.43%Apr 28, 2026
- Low2.1A vulnerability was found in code-projects Coaching Management System 1.0.Check if you run itEPSS 0.23%Apr 28, 2026
- Medium5.4The Check & Log Email WordPress plugin before 2.0.13 does not properly handle email replacement, which could allow unauthenticated users to perform Stored XSS attacks…Check if you run itEPSS 0.15%Apr 28, 2026
- High8.6In Spring AI, various FilterExpressionConverter implementations accept a filter expression object and translate them to specific vector store query languages.Check if you run itEPSS 0.39%Apr 28, 2026
- Medium5.5A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0.Check if you run itEPSS 0.25%Apr 28, 2026
- Medium5.5A security vulnerability has been detected in SourceCodester Pizzafy Ecommerce System 1.0.Check if you run itEPSS 0.25%Apr 28, 2026
- Medium5.5A weakness has been identified in SourceCodester Pizzafy Ecommerce System 1.0.Check if you run itEPSS 0.25%Apr 28, 2026
- Medium5.5A vulnerability was identified in BigSweetPotatoStudio HyperChat up to 2.0.0-alpha.63.Check if you run itEPSS 0.28%Apr 28, 2026
- Low2.0A vulnerability was determined in code-projects Coaching Management System 1.0.Check if you run itEPSS 0.23%Apr 28, 2026
- Medium5.5A vulnerability has been found in jackwrichards FastlyMCP up to 6f3d0b0e654fc51076badc7fa16c03c461f95620.Check if you run itEPSS 1.47%Apr 28, 2026
- Medium5.5A weakness has been identified in donchelo processing-claude-mcp-bridge up to e017b20a4b592a45531a6392f494007f04e661bd.Check if you run itEPSS 0.41%Apr 28, 2026
- Medium5.5A security flaw has been discovered in egtai gmx-vmd-mcp up to 0.1.0.Check if you run itEPSS 1.47%Apr 28, 2026
- High7.2A post-authentication command injection vulnerability in the “DomainName” parameter of the DHCP configuration file in Zyxel DX3301-T0 and EX3301-T0 firmware versions t…Check if you run itEPSS 1.16%Apr 28, 2026
- Medium5.5A vulnerability was identified in eghuzefa engineer-your-data up to 0.1.3.Check if you run itEPSS 0.41%Apr 28, 2026
- Medium5.5A weakness has been identified in dvladimirov MCP up to 0.1.0.Check if you run itEPSS 1.47%Apr 28, 2026
- Medium5.5A vulnerability was identified in duartium papers-mcp-server 9ceb3812a6458ba7922ca24a7406f8807bc55598.Check if you run itEPSS 0.43%Apr 28, 2026
- Critical9.2Specific firmware versions of Milesight AIOT cameras use SSL certificates with default private keys.Check if you run itEPSS 0.22%Apr 28, 2026
Sort