Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3Papra is a minimalistic document management and archiving platform.Check if you run itEPSS 0.24%Apr 7, 2026
- Medium5.4Papra is a minimalistic document management and archiving platform.Check if you run itEPSS 0.19%Apr 7, 2026
- Critical9.8In OpenAirInterface V2.2.0 AMF, Out of sequence messages causes incorrect state transition during UE registration procedure.Check if you run itEPSS 0.53%Apr 7, 2026
- Critical9.8An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000.Check if you run itEPSS 0.50%Apr 7, 2026
- High7.2A path traversal vulnerability exists in mintplex-labs/anything-llm versions up to and including 1.9.1, within the component.Check if you run itEPSS 0.81%Apr 7, 2026
- High8.7A race condition in the Apache Kafka Java producer client’s buffer pool management can cause messages to be silently delivered to incorrect topics.Check if you run itEPSS 0.44%Apr 7, 2026
- Medium5.1MLflow is vulnerable to Stored Cross-Site Scripting (XSS) caused by unsafe parsing of YAML-based MLmodel artifacts in its web interface.Check if you run itEPSS 0.22%Apr 7, 2026
- High8.3Incorrect Authorization vulnerability in Erlang OTP (inets modules) allows unauthenticated access to CGI scripts protected by directory rules when served via script_alias.Check if you run itEPSS 0.56%Apr 7, 2026
- High8.6Dolibarr ERP/CRM versions prior to 23.0.2 contain an authenticated remote code execution vulnerability in the dol_eval_standard() function that fails to apply forbidde…Check this weekEPSS 15.53%Apr 7, 2026
- High8.7Tinyproxy through 1.11.3 is vulnerable to HTTP request parsing desynchronization due to a case-sensitive comparison of the Transfer-Encoding header in src/reqs.c.Check if you run itEPSS 0.57%Apr 7, 2026
- Medium5.1Bludit is vulnerable to Stored Cross-Site Scripting (XSS) in its page creating functionality.Check if you run itEPSS 0.16%Apr 7, 2026
- High7.5Cross-Site Request Forgery (CSRF) vulnerability in Analytify Under Construction, Coming Soon & Maintenance Mode allows Cross Site Request Forgery.This issue affects Un…Check if you run itEPSS 0.12%Apr 7, 2026
- Medium4.3Improper validation and restriction of a classpath path name vulnerability in Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ Web,…Check if you run itEPSS 0.42%Apr 7, 2026
- Medium5.3The Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More plugin for WordPress is vulnerable to Insufficient Verification of Data Au…Check if you run itEPSS 0.17%Apr 7, 2026
- High8.8The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.1.3.Check if you run itEPSS 0.63%Apr 7, 2026
- Medium6.5The SQL Chart Builder WordPress plugin before 2.3.8 does not properly escape user input as it is concatened to SQL queries, making it possible for attackers to conduct…Check if you run itEPSS 0.19%Apr 7, 2026
- Critical9.8In parisneo/lollms version 2.1.0, the application's session management is vulnerable to improper access control due to the use of a weak secret key for signing JSON We…Check if you run itEPSS 0.54%Apr 7, 2026
- Low2.1A vulnerability was identified in code-projects Online Hotel Booking 1.0.Check if you run itEPSS 0.36%Apr 7, 2026
- UnknownSecurity exception in org.apache.lucene.analysis.tokenattributes.CharTermAttributeImpl.cloneOpen the advisoryApr 7, 2026
- Critical9.3nextendweb smart_slider_3 Embedded Malicious CodePatch nowKEVEPSS 0.55%Apr 7, 2026
- Critical9.3Weaver e-cology Missing Authentication for Critical FunctionPatch nowKEVEPSS 20.36%Apr 7, 2026
- High7.4A weakness has been identified in Tenda CX12L 16.03.53.12.Check if you run itEPSS 0.67%Apr 6, 2026
- High7.4A vulnerability was identified in Tenda CX12L 16.03.53.12.Check if you run itEPSS 0.69%Apr 6, 2026
- Medium5.1WeGIA is a Web manager for charitable institutions.Check if you run itEPSS 0.18%Apr 6, 2026
- Medium5.3WWBN AVideo is an open source video platform.Check if you run itEPSS 0.37%Apr 6, 2026
Sort