Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5FlexRIC v2.0.0 crashes when the iApp receives an E42_RIC_SUBSCRIPTION_REQUEST with an empty ricEventTriggerDefinition field.Check if you run itEPSS 0.59%Jun 1, 2026
- High7.5FlexRIC v2.0.0 crashes when receiving a duplicate E2_SETUP_REQUEST from the same or spoofed E2 Node.Check if you run itEPSS 0.61%Jun 1, 2026
- High7.5FlexRIC v2.0.0 uses hardcoded assertions to validate Information Element (IE) counts in decoded E2AP messages.Check if you run itEPSS 0.61%Jun 1, 2026
- Low2.1A vulnerability was determined in indrasishbanerjee aem-mcp-server up to b5f833aef9b5dfd17a5991b3b18a8a11edbdc583.Check if you run itEPSS 0.21%Jun 1, 2026
- High7.5FlexRIC v2.0.0 crashes when an SCTP association is closed before an E2_SETUP_REQUEST is sent.Check if you run itEPSS 0.61%Jun 1, 2026
- Low2.0A vulnerability was determined in lharries whatsapp-mcp 0.0.1.Check if you run itEPSS 0.27%Jun 1, 2026
- Medium5.3Server-Side Request Forgery (SSRF) in the UrlImageConverter component of Apache Fesod (Incubating) fesod-sheet before 2.0.2-incubating allows attackers to cause outbou…Check if you run itEPSS 0.72%Jun 1, 2026
- Medium5.5A vulnerability was identified in itsourcecode Online Blood Bank Management System 1.0.Check if you run itEPSS 0.27%Jun 1, 2026
- Low3.1Exploitation requires the attacker to already be an authenticated Airflow worker holding a valid Log-server JWT issued for at least one Dag.Check if you run itEPSS 0.52%Jun 1, 2026
- High7.5A bug in Apache Airflow's bulk Task Instances API ( ) evaluated authorization against the resolved from the URL path while operating on the / extracted from request-bo…Check if you run itEPSS 0.76%Jun 1, 2026
- Medium5.9Apache Airflow's set the JWT auth cookie without the flag, so deployments running the Airflow API server behind an HTTPS-terminating reverse proxy (e.g.Check if you run itEPSS 0.38%Jun 1, 2026
- Medium5.1SOPlanning is vulnerable to Cross‑Site Request Forgery (CSRF) in groupe_save create, modify and delete endpoints.Check if you run itEPSS 0.22%Jun 1, 2026
- Low2.1A security flaw has been discovered in jeecgboot The server processes these URLs up to 3.9.1.Check if you run itEPSS 0.27%Jun 1, 2026
- Low2.1A vulnerability was identified in JeecgBoot up to 3.9.2.Check if you run itEPSS 0.27%Jun 1, 2026
- Low2.1A vulnerability was determined in JeecgBoot up to 3.9.2.Check if you run itEPSS 0.27%Jun 1, 2026
- Medium5.5A security vulnerability has been detected in NousResearch hermes-agent up to 2026.4.30.Check if you run itEPSS 0.37%Jun 1, 2026
- High7.1An improper neutralization of user-controllable input in OTRS or ((OTRS)) Community Edition ticket handling allows authenticated attackers to perform reflected cross-s…Check if you run itEPSS 0.36%Jun 1, 2026
- Medium5.5A vulnerability was found in nextlevelbuilder GoClaw up to 3.11.3.Check if you run itEPSS 1.34%Jun 1, 2026
- Low2.1A security vulnerability has been detected in Dolibarr ERP CRM up to 23.0.1.Check if you run itEPSS 0.26%Jun 1, 2026
- Low1.9A vulnerability was detected in Assimp up to 6.0.4.Check if you run itEPSS 0.11%May 31, 2026
- High8.6OpenCATS from version 0.9.1a contains an SQL injection vulnerability in DataGrid filter handling that allows authenticated attackers to inject SQL through crafted filt…Check if you run itEPSS 0.43%May 31, 2026
- Low2.1A security vulnerability has been detected in Aider-AI Aider 0.86.3.Check if you run itEPSS 0.21%May 31, 2026
- Medium5.3The Advanced Custom Fields (ACF®) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.8.1.Check if you run itEPSS 0.52%May 31, 2026
- Low2.1A vulnerability was determined in Edimax BR-6478AC 1.23.Check if you run itEPSS 1.07%May 31, 2026
- High7.4A vulnerability was identified in Edimax BR-6478AC 1.23.Check if you run itEPSS 0.47%May 31, 2026