Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3Wazuh authd contains a heap-buffer overflow vulnerability that allows attackers to cause memory corruption and malformed heap data by sending specially crafted input.Check if you run itEPSS 0.33%Mar 27, 2026
- High7.0The '/api/v1/files/images/{flow_id}/{file_name}' endpoint serves SVG files with the 'image/svg+xml' content type without sanitizing their content.Check if you run itEPSS 0.16%Mar 27, 2026
- High8.2The Twilio integration webhook handler accepts any POST request without validating Twilio's 'X-Twilio-Signature'.Check if you run itEPSS 0.16%Mar 27, 2026
- Medium6.3A local file disclosure vulnerability in the XInclude processing component of Inkscape 1.1 before 1.3 allows a remote attacker to read local files via a crafted SVG fi…Check if you run itEPSS 0.24%Mar 27, 2026
- Medium5.5A weakness has been identified in mingSoft MCMS up to 5.5.0.Check if you run itEPSS 0.29%Mar 27, 2026
- Medium5.3WWBN AVideo is an open source video platform.Check if you run itEPSS 0.24%Mar 27, 2026
- Medium4.3WWBN AVideo is an open source video platform.Check if you run itEPSS 0.22%Mar 27, 2026
- Medium5.3WWBN AVideo is an open source video platform.Check if you run itEPSS 0.33%Mar 27, 2026
- Medium5.3WWBN AVideo is an open source video platform.Check if you run itEPSS 0.40%Mar 27, 2026
- Critical9.4OpenBao is an open source identity-based secrets management system.Check if you run itEPSS 0.30%Mar 27, 2026
- High7.5The brace-expansion library generates arbitrary strings containing a common prefix and suffix.Check if you run itEPSS 0.45%Mar 27, 2026
- Low1.2GlobaLeaks is free and open-source whistleblowing software.Check if you run itEPSS 0.20%Mar 27, 2026
- High8.2calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books.Check if you run itEPSS 0.22%Mar 27, 2026
- Medium4.3In Blog.Core through bcb4d17, the getinfobytoken API interface contains improper access control that leads to sensitive data exposure.Check if you run itEPSS 0.29%Mar 27, 2026
- High7.5Server-Side Request Forgery (SSRF) vulnerability exists in the AnnounContent of the /admin/read.php in OTCMS V7.66 and before.Check if you run itEPSS 0.52%Mar 27, 2026
- Critical9.6In its design for automatic terminal command execution, AI Code offers two options: Execute safe commands and execute all commands.Check if you run itEPSS 0.45%Mar 27, 2026
- Critical9.8The command auto-approval module in Axon Code contains an OS Command Injection vulnerability, rendering its whitelist security mechanism ineffective.Check if you run itEPSS 1.43%Mar 27, 2026
- High7.5A path traversal vulnerability exists in the awesome-llm-apps project in commit e46690f99c3f08be80a9877fab52acacf7ab8251 (2026-01-19) in the Beifong AI News and Podcas…Check if you run itEPSS 0.58%Mar 27, 2026
- Critical9.1A chained attack via SQL Expressions and a Grafana Enterprise plugin can lead to a remote arbitrary code execution impact (RCE).Check if you run itEPSS 1.96%Mar 27, 2026
- Medium6.5BS Producten Petcam 33.1.0.0818 is vulnerable to Incorrect Access Control.Check if you run itEPSS 0.18%Mar 27, 2026
- High7.2A buffer overflow vulnerability exists in the ONVIF GetStreamUri function of LSC Indoor Camera V7.6.32.Check if you run itEPSS 0.56%Mar 27, 2026
- High7.3Insertion of Sensitive Information into Log File vulnerability in the SCIM Driver module in OpenText IDM Driver and Extensions on Windows, Linux, 64 bit allows authent…Check if you run itEPSS 0.11%Mar 27, 2026
- Medium5.1ByteDance DeerFlow versions prior to commit 5dbb362 contain a stored cross-site scripting vulnerability in the artifacts API that allows attackers to execute arbitrary…Check if you run itEPSS 0.20%Mar 27, 2026
- High8.4Cache misconfiguration vulnerability in OpenText Identity Manager on Windows, Linux allows remote authenticated users to obtain another user's session data via insecur…Check if you run itEPSS 0.27%Mar 27, 2026
- High7.3A user with permission "update world" in any Venueless world is able to exfiltrate chat messages from direct messages or channels in other worlds on the same server du…Check if you run itEPSS 0.23%Mar 27, 2026
Sort