Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to improper server-side validation.Check if you run itEPSS 0.27%Apr 1, 2026
- High7.4A local file inclusion vulnerability in the upload/download flow of the VertiGIS FM application allows authenticated attackers to read arbitrary files from the server…Check if you run itEPSS 0.62%Apr 1, 2026
- Critical9.3metinfo metinfo Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 39.49%Apr 1, 2026
- High7.3Dell AppSync, version(s) 4.6.0, contain(s) an Incorrect Permission Assignment for Critical Resource vulnerability.Check if you run itEPSS 0.13%Apr 1, 2026
- High7.3Dell AppSync, version(s) 4.6.0, contain(s) an UNIX Symbolic Link (Symlink) Following vulnerability.Check if you run itEPSS 0.17%Apr 1, 2026
- Medium6.7A vulnerability was identified in MEPIS RM, an industrial software product developed by Metronik.Check if you run itEPSS 0.16%Apr 1, 2026
- Medium5.3Insufficient permission validation on multiple REST API Quick Setup endpoints in Checkmk 2.5.0 (beta) before version 2.5.0b2 and 2.4.0 before version 2.4.0p25 allows l…Check if you run itEPSS 0.24%Apr 1, 2026
- Medium5.3Ericsson Packet Core Controller (PCC) versions prior to 1.38 contain a vulnerability where an attacker sending a large volume of specially crafted messages may cause s…Check if you run itEPSS 0.38%Apr 1, 2026
- Medium5.5A vulnerability was identified in Shandong Hoteam InforCenter PLM up to 8.3.8.Check if you run itEPSS 0.39%Apr 1, 2026
- Critical10.0A vulnerability was identified in Juju from version 3.2.0 until 3.6.19 and from version 4.0 until 4.0.4, where the internal Dqlite database cluster fails to perform pr…Check if you run itEPSS 0.39%Apr 1, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force Ultimate Addons for WPBakery Page Builder allows…Check if you run itEPSS 0.18%Apr 1, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: apparmor: fix race between freeing data and fs accessing it AppArmor was putting the reference to i…Check if you run itEPSS 0.15%Apr 1, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: apparmor: fix differential encoding verification Differential encoding allows loops to be created i…Check if you run itEPSS 0.18%Apr 1, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: apparmor: Fix double free of ns_name in aa_replace_profiles() if ns_name is NULL after 1071 error =…Check if you run itEPSS 0.18%Apr 1, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: apparmor: fix missing bounds check on DEFAULT table in verify_dfa() The verify_dfa() function only…Check if you run itEPSS 0.18%Apr 1, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: apparmor: fix side-effect bug in match_char() macro usage The match_char() macro evaluates its char…Check if you run itEPSS 0.18%Apr 1, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: apparmor: replace recursive profile removal with iterative approach The profile removal code uses r…Check if you run itEPSS 0.18%Apr 1, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE Adjust KVM's sanity che…Check if you run itEPSS 0.17%Apr 1, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE When installing an emu…Check if you run itEPSS 0.19%Apr 1, 2026
- Low2.1A vulnerability was determined in AutohomeCorp frostmourne up to 1.0.Check if you run itEPSS 0.21%Apr 1, 2026
- High7.1PowerStore, contains a Path Traversal vulnerability in the Service user.Check if you run itEPSS 0.12%Apr 1, 2026
- High7.2Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application version(s) 5.28.00.xx to 5.32.00.xx, contain(s) an Improper Limitation of a Pathname to a Restricted Di…Check if you run itEPSS 0.40%Apr 1, 2026
- Medium5.5A vulnerability was found in Sanster IOPaint 1.5.3.Check if you run itEPSS 0.64%Apr 1, 2026
- High7.5A regression in the way hashes were calculated caused rules containing the address range syntax (x.x.x.x - y.y.y.y) that only differ in the address range(s) involved t…Check if you run itEPSS 0.25%Apr 1, 2026
- Medium5.3The Export All URLs WordPress plugin before 5.1 generates CSV filenames containing posts URLS (including private posts) in a predictable pattern using a random 6-digit number.Check if you run itEPSS 0.31%Apr 1, 2026
Sort