Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3Vikunja is an open-source self-hosted task management platform.Check if you run itEPSS 0.27%Apr 10, 2026
- High8.3Vikunja is an open-source self-hosted task management platform.Check if you run itEPSS 0.29%Apr 10, 2026
- Medium6.3Apache Log4cxx's XMLLayout https://logging.apache.org/log4cxx/1.7.0/classlog4cxx_1_1xml_1_1XMLLayout.html , in versions before 1.7.0, fails to sanitize characters forb…Check if you run itEPSS 0.50%Apr 10, 2026
- Medium6.3Apache Log4net's XmlLayout https://logging.apache.org/log4net/manual/configuration/layouts.html#layout-list and XmlLayoutSchemaLog4J https://logging.apache.org/log4net…Check if you run itEPSS 0.77%Apr 10, 2026
- Medium6.5Vikunja is an open-source self-hosted task management platform.Check if you run itEPSS 0.30%Apr 10, 2026
- Critical9.1Vikunja is an open-source self-hosted task management platform.Check if you run itEPSS 0.28%Apr 10, 2026
- Medium6.3Apache Log4j's JsonTemplateLayout https://logging.apache.org/log4j/2.x/manual/json-template-layout.html , in versions up to and including 2.25.3, produces invalid JSON…Check if you run itEPSS 0.69%Apr 10, 2026
- Medium6.9Apache Log4j Core's XmlLayout https://logging.apache.org/log4j/2.x/manual/layouts.html#XmlLayout , in versions up to and including 2.25.3, fails to sanitize characters…Check if you run itEPSS 1.05%Apr 10, 2026
- Medium6.9The Log4j1XmlLayout from the Apache Log4j 1-to-Log4j 2 bridge fails to escape characters forbidden by the XML 1.0 standard, producing malformed XML output.Check if you run itEPSS 0.53%Apr 10, 2026
- Medium5.5HDF5 is software for managing data.Check if you run itEPSS 0.21%Apr 10, 2026
- High8.6CouchCMS contains a privilege escalation vulnerability that allows authenticated Admin-level users to create SuperAdmin accounts by tampering with the f_k_levels_list…Check if you run itEPSS 0.43%Apr 10, 2026
- Critical9.8An issue was discovered in BMC Control-M/MFT 9.0.20 through 9.0.22.Check if you run itEPSS 0.28%Apr 10, 2026
- Medium6.1Cross Site Scripting vulnerability in Altenar Sportsbook Software Platform (SB2) v.2.0 allows a remote attacker to obtain sensitive information and execute arbitrary c…Check if you run itEPSS 0.23%Apr 10, 2026
- Critical9.8PHP-MYSQL-User-Login-System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at login.php.Check if you run itEPSS 0.32%Apr 10, 2026
- High7.5An issue was discovered in BMC Control-M/MFT 9.0.20 through 9.0.22.Check if you run itEPSS 0.27%Apr 10, 2026
- High7.5NASM’s disasm() function contains a stack based buffer overflow when formatting disassembly output, allowing an attacker triggered out-of-bounds write when exceeds the…Check if you run itEPSS 0.44%Apr 10, 2026
- Critical9.6NASM contains a heap use after free vulnerability in response file (-@) processing where a dangling pointer to freed memory is stored in the global depend_file and lat…Check if you run itEPSS 0.43%Apr 10, 2026
- High8.8LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/test_custom_code URI.Patch nowKEVEPSS 15.53%Apr 10, 2026
- High8.7This vulnerability exists in the Atom 3x Projector due to improper exposure of the Android Debug Bridge (ADB) service over the local network without authentication or…Check if you run itEPSS 0.26%Apr 10, 2026
- Critical9.8FalkorDB Browser 1.9.3 contains an unauthenticated path traversal vulnerability in the file upload API that allows remote attackers to write arbitrary files and achiev…Check if you run itEPSS 0.93%Apr 10, 2026
- High8.1A plaintext storage of a password vulnerability in Synology SSL VPN Client before 1.4.5-0684 allows remote attackers to access or influence the user's PIN code due to…Check if you run itEPSS 0.32%Apr 10, 2026
- Medium5.5A vulnerability was identified in code-projects Vehicle Showroom Management System 1.0.Check if you run itEPSS 0.26%Apr 10, 2026
- Medium5.5A vulnerability was found in code-projects Vehicle Showroom Management System 1.0.Check if you run itEPSS 0.33%Apr 10, 2026
- Low2.1A vulnerability was determined in CodeAstro Online Classroom 1.0.Check if you run itEPSS 0.21%Apr 10, 2026
- High7.8A stack-based buffer overflow vulnerability exists in Notepad++ version 8.9.3 in the file drop handler component.Check if you run itEPSS 0.17%Apr 10, 2026
Sort