Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3ERPNext 9.0.0 through 16.50.0 contains a missing authorization vulnerability that allows authenticated users to view stock quantities via whitelisted batch methods.Check if you run itEPSS 0.25%Oct 12, 2026
- Low2.1A vulnerability was found in Netcore NR268 1.7.121109.Check if you run itEPSS 0.26%Oct 12, 2026
- Low2.1A weakness has been identified in itsourcecode Baptism Information Management System 1.0.Check if you run itEPSS 0.25%Oct 12, 2026
- Medium5.1HoloViz Panel from 1.2.2 before 1.9.0 contains an open redirect vulnerability in panel/auth.py that allows remote attackers to redirect users by supplying an unvalidat…Check if you run itEPSS 0.28%Oct 12, 2026
- Medium6.0Flower before 2.2.0 contains a cross-site request forgery vulnerability because Tornado xsrf_cookies is disabled and the OAuth session cookie lacks SameSite.Check if you run itEPSS 0.14%Oct 12, 2026
- High8.3Nginx UI: MCP configuration tools bypass restricted directive validation and allow secondary authenticated users to execute NJS in Nginx worker contextCheck if you run itEPSS 0.28%Oct 12, 2026
- Medium6.3Nginx UI: Auto backup name allows path traversal outside validated storage pathCheck if you run itEPSS 0.17%Oct 12, 2026
- UnknownMalicious code in npp-ml (PyPI)Open the advisoryOct 12, 2026
- High7.2OWASP Coraza WAF is a golang modsecurity compatible web application firewall library.Check if you run itEPSS 0.38%Oct 12, 2026
- Critical9.1NetEase Cloud Music client for Windows (cloudmusic.exe) versions 3.1.38 and 3.1.39.205426 contains a TLS certificate validation vulnerability that allows a network-adj…Check if you run itEPSS 0.15%Oct 12, 2026
- High7.2Privasys Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections.Check if you run itEPSS 0.08%Oct 12, 2026
- Medium4.3Backstage: Improper access control in backend action invocationCheck if you run itEPSS 0.24%Oct 12, 2026
- High8.3Nginx UI OTP secure-session step-up is missing on sensitive mutation routesCheck if you run itEPSS 0.34%Oct 12, 2026
- Medium6.9Tink-go 2.8.0 Keyset Validation Bypass via NewHandleWithNoSecretsCheck if you run itEPSS 0.19%Oct 12, 2026
- High7.8containerd CRI plugin: Checkpoint restore bypasses destination security contextCheck if you run itEPSS 0.11%Oct 12, 2026
- Critical9.1A flaw was found in Quarkus REST Data Panache.Check if you run itEPSS 0.39%Oct 12, 2026
- Medium6.4A flaw was found in Quay.Check if you run itEPSS 0.21%Oct 12, 2026
- Medium5.3A flaw was found in openstack-network-exporter.Check if you run itEPSS 0.31%Oct 12, 2026
- High7.4A flaw was found in openstack-network-exporter.Check if you run itEPSS 0.28%Oct 12, 2026
- Critical9.8PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.41%Oct 12, 2026
- Low2.1A flaw has been found in KusalkaSilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2.Check if you run itEPSS 0.27%Oct 12, 2026
- Low2.1A security vulnerability has been detected in SourceCodester Drug Recommendation System 1.0.Check if you run itEPSS 0.26%Oct 12, 2026
- Medium5.3copyparty FTP: upload outside defined volumes (limited path traversal)Check if you run itEPSS 0.31%Oct 12, 2026
- Medium6.5obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults.Check if you run itEPSS 0.24%Oct 12, 2026
- Medium5.2An out-of-bounds write vulnerability in the SPI host command interface of Semtech's LR11xx transceiver firmware where a crafted SPI host command with an oversized leng…Check if you run itEPSS 0.17%Oct 12, 2026
Sort