Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.1Authorization Bypass Through User-Controlled KeyCheck if you run itEPSS 0.20%Oct 11, 2026
- High7.5Decompression bomb in : a tiny input can exhaust memory (OOM)Open the advisoryOct 11, 2026
- Medium5.5A weakness has been identified in Xinhu Rainrock RockOA up to 2.7.6.Check if you run itEPSS 0.32%Oct 11, 2026
- Medium5.1Open Asset Import Library Assimp PLY File getNextBlock out-of-boundsCheck if you run itEPSS 0.17%Oct 11, 2026
- Low2.1A vulnerability was found in InstantSoft icms2 up to 2.18.2.Check if you run itEPSS 0.37%Oct 11, 2026
- Medium5.3Furion .NET Framework StringRenderExtensions.cs String.Replace sql injectionCheck if you run itEPSS 0.19%Oct 11, 2026
- Low2.1A vulnerability was found in 021is elvix-sdk up to 0.10.1.Check if you run itEPSS 0.21%Oct 11, 2026
- Medium5.3Lippu Docx Reader Office Viewer App path traversalCheck if you run itEPSS 0.41%Oct 11, 2026
- UnknownMalicious code in staking-apr-fetcher (RubyGems)Open the advisoryOct 11, 2026
- UnknownMalicious code in seed-phrase-validator (RubyGems)Open the advisoryOct 11, 2026
- UnknownMalicious code in evm-tx-decoder (RubyGems)Open the advisoryOct 11, 2026
- UnknownMalicious code in tron-trc20-utils (RubyGems)Open the advisoryOct 11, 2026
- UnknownMalicious code in hd-wallet-generator (RubyGems)Open the advisoryOct 11, 2026
- UnknownMalicious code in wallet-balance-scanner (RubyGems)Open the advisoryOct 11, 2026
- UnknownMalicious code in ton-jetton-tools (RubyGems)Open the advisoryOct 11, 2026
- UnknownMalicious code in wallet-hd-derive (RubyGems)Open the advisoryOct 11, 2026
- UnknownMalicious code in perp-funding-rates (RubyGems)Open the advisoryOct 11, 2026
- UnknownMalicious code in block-explorer-api (RubyGems)Open the advisoryOct 11, 2026
- UnknownMalicious code in xrp-ledger-utils (RubyGems)Open the advisoryOct 11, 2026
- UnknownMalicious code in sol-mint-utils (RubyGems)Open the advisoryOct 11, 2026
- Critical9.4OpenSpug File Transfer transfer os command injectionCheck if you run itEPSS 1.70%Oct 11, 2026
- Low2.1A security vulnerability has been detected in GPAC up to 26.07.0.Check if you run itEPSS 0.22%Oct 11, 2026
- Medium6.9Studio-Saelix Sencho Login Endpoint login improper authenticationCheck if you run itEPSS 0.42%Oct 11, 2026
- Medium5.3CordysCRM through 1.9.3 contains a missing authorization vulnerability in the POST /custom-form/data/import endpoint that allows authenticated users to import data int…Check if you run itEPSS 0.20%Oct 11, 2026
- Medium5.31Panel-dev CordysCRM through 1.9.3 lacks a PROCESS_SETTING permission check on POST /approval-flow/webhook/test, allowing any authenticated user to trigger server-side…Check if you run itEPSS 0.23%Oct 11, 2026
Sort