Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low1.9A vulnerability was identified in GNU LibreDWG up to 0.14.Check if you run itEPSS 0.15%May 25, 2026
- Low1.9A vulnerability was determined in GNU LibreDWG up to 0.14.Check if you run itEPSS 0.15%May 25, 2026
- Low1.9A vulnerability was found in GNU LibreDWG up to 0.14.Check if you run itEPSS 0.12%May 25, 2026
- Low3.7PuTTY 0.71 before 0.84 has an assertion failure in ECDSA signature verification.Check if you run itEPSS 0.27%May 25, 2026
- Low3.1PuTTY 0.77 before 0.84 uses a copy of the PuTTY icon as a trust indication for TELNET data but the trust status is not cleared between proxy authentication and the main session.Check if you run itEPSS 0.22%May 25, 2026
- Medium5.9PuTTY 0.72 before 0.84 has a double free in RSA KEX.Check if you run itEPSS 0.32%May 25, 2026
- None0.0Apache Shiro’s Jakarta EE module used the HTTP Referer header in certain cases to issue redirect after a user login.Check if you run itEPSS 0.35%May 25, 2026
- Medium5.1With valid login credentials, URL Redirection to Untrusted Site ('Open Redirect'), Server-Side Request Forgery (SSRF) vulnerability in Apache Shiro.Check if you run itEPSS 0.37%May 25, 2026
- Medium5.9Default configurations of Apache Shiro send sensitive cookies in HTTPS session without 'Secure' attribute.Check if you run itEPSS 0.27%May 25, 2026
- Medium5.9Default configurations of Apache Shiro have a session fixation vulnerability.Check if you run itEPSS 0.41%May 25, 2026
- Medium4.3Cross-Site Request Forgery (CSRF) vulnerability in WpDevArt Organization chart allows Cross Site Request Forgery.Check if you run itEPSS 0.12%May 25, 2026
- Medium6.5Cross-Site Request Forgery (CSRF) vulnerability in Recorp Export WP Page to Static HTML/CSS allows Cross Site Request Forgery.Check if you run itEPSS 0.14%May 25, 2026
- Medium4.3Missing Authorization vulnerability in Nikki Blight QR Redirector allows Exploiting Incorrectly Configured Access Control Security Levels.Check if you run itEPSS 0.20%May 25, 2026
- Low2.1A vulnerability has been found in Dromara lamp-cloud up to 5.6.2.Check if you run itEPSS 0.29%May 25, 2026
- Low2.1A flaw has been found in changmingxie tcc-transaction up to 2.1.0.Check if you run itEPSS 0.34%May 25, 2026
- Low2.1A security flaw has been discovered in SourceCodester Student Grades Management System 1.0.Check if you run itEPSS 0.19%May 25, 2026
- Low2.0A vulnerability was identified in SourceCodester Student Grades Management System 1.0.Check if you run itEPSS 0.25%May 25, 2026
- Low2.1A vulnerability was determined in SourceCodester Student Grades Management System 1.0.Check if you run itEPSS 0.27%May 25, 2026
- Medium4.4In Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1, an unsanitized subject field in the draft restored value could lead to stored XSS/HTML/CSS injection o…Check if you run itEPSS 0.24%May 25, 2026
- High7.2Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7 has insufficient HTML sanitization that could lead to Cascading Style Sheets (CSS) injection via an SVG docu…Check if you run itEPSS 0.39%May 25, 2026
- Low3.7Roundcube Webmail 1.6.x before 1.6.16, and 1.7.x before 1.7.1 allows pre-authentication arbitrary file deletion via redis/memcache session poisoning bypass.Check if you run itEPSS 0.43%May 25, 2026
- Medium6.5In Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1, the remote image blocking feature can be bypassed via a crafted CSS var() value in an e-mail message,…Check if you run itEPSS 0.40%May 25, 2026
- Medium6.5In Roundcube Webmail 1.6.x between 1.6.14 and 1.6.16 and 1.7.x before 1.7.1, remote image blocking was not honored for URLs pointing to local/private destinations, whi…Check if you run itEPSS 0.38%May 25, 2026
- High7.5Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has insecure code evaluation logic in LDAP the autovalues option that could lead to code injection.Check if you run itEPSS 0.41%May 25, 2026
- High7.2Roundcube Webmail 1.6.x between 1.6.14 and 1.6.16,and 1.7.x before 1.7.1 has Insufficient Cascading Style Sheets (CSS) sanitization in HTML e-mail messages may lead to…Check if you run itEPSS 0.27%May 25, 2026
Sort