Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Colanode Server through 0.4.7 Path Traversal via Avatar Download RouteCheck if you run itEPSS 0.29%Oct 14, 2026
- High8.2FlexPrice through 2.1.38 contains an authentication bypass vulnerability in HandleQuickBooksWebhook that skips signature verification when the intuit-signature header is omitted.Check if you run itEPSS 0.22%Oct 14, 2026
- Medium6.0AstronRPA through 1.1.6 Cross-Tenant File Disclosure via /file/downloadCheck if you run itEPSS 0.24%Oct 14, 2026
- Low2.2Dell OS Recovery Tool, versions prior to 2.4.4, contains an Insecure Storage of Sensitive Information vulnerability.Check if you run itEPSS 0.11%Oct 14, 2026
- UnknownIBM security advisory (AV26-1040)Check if you run itEPSS 0.40%Oct 14, 2026
- High8.8Mongoose is an embedded web server and network library.Check if you run itEPSS 0.24%Oct 14, 2026
- High7.5Mongoose is an embedded web server and network library.Check if you run itEPSS 0.35%Oct 14, 2026
- High7.5Mongoose is an embedded web server and network library.Check if you run itEPSS 0.23%Oct 14, 2026
- High7.5Mongoose is an embedded web server and network library.Check if you run itEPSS 0.38%Oct 14, 2026
- Critical9.1Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files.Check if you run itEPSS 0.63%Oct 14, 2026
- Medium6.5F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications.Check if you run itEPSS 0.54%Oct 14, 2026
- High7.5F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications.Check if you run itEPSS 0.37%Oct 14, 2026
- Medium6.5A flaw was found in the DPDK nfp vDPA driver.Check if you run itEPSS 0.13%Oct 14, 2026
- Medium6.5A flaw was found in DPDK lib/vhost vhost-crypto.Check if you run itEPSS 0.13%Oct 14, 2026
- Medium6.5A flaw was found in DPDK lib/vhost vhost-crypto.Check if you run itEPSS 0.16%Oct 14, 2026
- Medium6.5A flaw was found in DPDK lib/vhost vhost-crypto.Check if you run itEPSS 0.16%Oct 14, 2026
- High8.8A flaw was found in DPDK lib/vhost.Check if you run itEPSS 0.14%Oct 14, 2026
- High8.8The FV Flowplayer Video Player plugin for WordPress is vulnerable to Limited Arbitrary File Upload in all versions up to, and including, 7.5.54.7212 via the check_mime…Check if you run itEPSS 0.74%Oct 14, 2026
- High8.1ServiceNext contains an insecure direct object reference (IDOR) in the /api/Usuario/GetUsuarios endpoint, which accepts a user-controlled numeric ID in the request bod…Check if you run itEPSS 0.27%Oct 14, 2026
- Medium4.9Redash is a package for data visualization and sharing.Check if you run itEPSS 0.41%Oct 14, 2026
- High8.1Ludwig is a low-code framework for building custom LLMs, neural networks, and other AI models.Check if you run itEPSS 0.49%Oct 14, 2026
- Medium6.5Appium is a cross-platform automation framework for all kinds of apps, built on top of the W3C WebDriver protocol.Check if you run itEPSS 0.65%Oct 14, 2026
- High8.4The GUIX binary resource (theme) loader sizes its arena and populates it in two separate passes that traverse the resource file with independent cursor arithmetic.Check if you run itEPSS 0.16%Oct 14, 2026
- Critical9.1In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x HTTP client relies on an SSL context for efficiency purpose, the key of this c…Check if you run itEPSS 0.23%Oct 14, 2026
- Critical9.3A Stack-based Buffer Overflow vulnerability in the httpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to cause…Check if you run itEPSS 0.54%Oct 14, 2026