Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9PraisonAI before 4.6.78 contains a prompt injection defense bypass vulnerability where the injection defense only blocks threats classified as CRITICAL, requiring thre…Check if you run itEPSS 0.27%Jul 10, 2026
- Medium5.1Grav before 1.0.3 Stored XSS via SVG Upload APICheck if you run itEPSS 0.17%Jul 10, 2026
- Critical9.4PraisonAI before 4.6.78 Code Injection via f-stringCheck if you run itEPSS 0.50%Jul 10, 2026
- High7.1PraisonAI Platform before 0.1.9 Authorization Bypass via DependenciesCheck if you run itEPSS 0.29%Jul 10, 2026
- High8.5PraisonAI before 1.6.78 Remote Code Execution via tools.pyCheck if you run itEPSS 0.20%Jul 10, 2026
- Medium5.1mtr is vulnerable to Out-of-bound read vulnerability in ipinfo_lookup() function.Check if you run itEPSS 0.45%Jul 10, 2026
- UnknownVeeam veeam_backup_\&_replication Deserialization of Untrusted DataPatch nowKEVEPSS 2.35%Jul 10, 2026
- Medium6.5SiYuan: Publish-mode Reader can exfiltrate private saved-search Criteria via /api/storage/getCriteria (missing publish-access filter)Check if you run itEPSS 0.30%Jul 9, 2026
- High8.6SiYuan: Store XSS To Rce via Asset.renderCheck if you run itEPSS 0.39%Jul 9, 2026
- High8.6SiYuan: Stored XSS to RCE in SiYuan via a per-attribute URL-scheme sanitizer gap in Lute (form action / SVG xlink:href)Check if you run itEPSS 0.49%Jul 9, 2026
- High7.5SiYuan: SQL Query in Block Search Exposes Hidden Published Document ContentCheck if you run itEPSS 0.48%Jul 9, 2026
- High7.5A stack buffer overflow vulnerability was found in GStreamer's DTLS plugin.Check if you run itEPSS 0.58%Jul 9, 2026
- High7.1A heap buffer overflow vulnerability was found in GStreamer's rfbsrc plugin.Check if you run itEPSS 0.33%Jul 9, 2026
- Unknownmailoptin mailoptin Incorrect Privilege AssignmentPatch nowKEVEPSS 0.48%Jul 9, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 3.48%Jul 9, 2026
- UnknownHCSEC-2026-22 - Nomad vulnerable to cross-namespace host volume claim deletionCheck if you run itEPSS 0.25%Jul 8, 2026
- Low2.1LiteLLM LiteLLM Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.90%Jul 8, 2026
- UnknownHCSEC-2026-21 - Nomad vulnerable to sandbox escape in Docker task driverCheck if you run itEPSS 0.49%Jul 8, 2026
- UnknownHCSEC-2026-20 - Consul-template vulnerable to path redirections in writeToFileCheck if you run itEPSS 0.13%Jul 8, 2026
- UnknownHCSEC-2026-19 - Nomad Docker driver vulnerable to host namespace bypass on LinuxCheck if you run itEPSS 0.34%Jul 8, 2026
- UnknownHCSEC-2026-18 - Memberlist vulnerable to denial of service via gossip messageCheck if you run itEPSS 0.25%Jul 8, 2026
- High7.5Socket.IO enables bidirectional and low-latency communication for every platform.Check if you run itEPSS 0.64%Jul 8, 2026
- Low3.1BBOT's Symlink guard bypass in unarchive module allows planting symlinks during extractionCheck if you run itEPSS 0.38%Jul 8, 2026
- Medium6.5sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay.Check if you run itEPSS 0.29%Jul 8, 2026
- Low3.7sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive authentication attempts) because MaxAuthTries was mishandled fCheck if you run itEPSS 0.62%Jul 8, 2026
Sort