Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.8Bludit is vulnerable to Stored Cross-Site Scripting (XSS) in its image upload functionality.Check if you run itEPSS 0.20%Mar 27, 2026
- Medium5.3If auth_username_chars is empty, it is possible to inject arbitrary LDAP filter to Dovecot's LDAP authentication.Check if you run itEPSS 0.30%Mar 27, 2026
- Medium5.3A mail message containing excessive amount of RFC 2231 MIME parameters causes LMTP to use too much CPU.Check if you run itEPSS 0.38%Mar 27, 2026
- High7.5Attacker can send a specifically crafted message before authentication that causes managesieve to allocate large amount of memory.Check if you run itEPSS 0.80%Mar 27, 2026
- High7.5Sending "NOOP (((...)))" command with 4000 parenthesis open+close results in ~1MB extra memory usage.Check if you run itEPSS 0.68%Mar 27, 2026
- Medium5.9Doveadm credentials are verified using direct comparison which is susceptible to timing oracle attack.Check if you run itEPSS 0.40%Mar 27, 2026
- Medium5.9Dovecot OTP authentication is vulnerable to replay attack under specific conditions.Check if you run itEPSS 0.32%Mar 27, 2026
- High8.2Dovecot SQL based authentication can be bypassed when auth_username_chars is cleared by admin.Check if you run itEPSS 0.40%Mar 27, 2026
- Medium5.3When dovecot has been configured to use per-domain passwd files, and they are placed one path component above /etc, or slash has been added to allowed characters, path…Check if you run itEPSS 0.43%Mar 27, 2026
- High7.5ManageSieve AUTHENTICATE command crashes when using literal as SASL initial response.Check if you run itEPSS 0.73%Mar 27, 2026
- Medium4.3Dovecot has provided a script to use for attachment to text conversion.Check if you run itEPSS 0.29%Mar 27, 2026
- High7.5When sending invalid base64 SASL data, login process is disconnected from the auth server, causing all active authentication sessions to fail.Check if you run itEPSS 0.46%Mar 27, 2026
- Medium5.1WordPress Plugin "OpenStreetMap" provided by MiKa contains a cross-site scripting vulnerability.Check if you run itEPSS 0.17%Mar 27, 2026
- High8.6Hidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to gain access to the product’s debugging functionality, resulting in t…Check if you run itEPSS 0.38%Mar 27, 2026
- High7.5In RedisFilterExpressionConverter of spring-ai-redis-store, when a user-controlled string is passed as a filter value for a TAG field, stringValue() inserts the value…Check if you run itEPSS 0.26%Mar 27, 2026
- High7.5Spring AI's spring-ai-neo4j-store contains a Cypher injection vulnerability in Neo4jVectorFilterExpressionConverter.Check if you run itEPSS 0.26%Mar 27, 2026
- High8.6Spring AI's spring-ai-bedrock-converse contains a Server-Side Request Forgery (SSRF) vulnerability in BedrockProxyChatModel when processing multimodal messages that in…Check if you run itEPSS 0.36%Mar 27, 2026
- Critical9.8In Spring AI, a SpEL injection vulnerability exists in SimpleVectorStore when a user-supplied value is used as a filter expression key.Check if you run itEPSS 1.11%Mar 27, 2026
- Medium6.5The Smart Slider 3 plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 3.5.1.33 via the 'actionExportAll' function.Check if you run itEPSS 0.49%Mar 27, 2026
- Low1.9A weakness has been identified in code-projects Exam Form Submission 1.0.Check if you run itEPSS 0.29%Mar 27, 2026
- Low2.1A vulnerability was identified in Page-Replica Page Replica up to e4a7f52e75093ee318b4d5a9a9db6751050d2ad0.Check if you run itEPSS 0.21%Mar 27, 2026
- High7.7MyTube is a self-hosted downloader and player for several video websites Prior to version 1.8.72, an unauthenticated attacker can lock out administrator and visitor ac…Check if you run itEPSS 0.56%Mar 27, 2026
- High8.9MyTube is a self-hosted downloader and player for several video websites Prior to version 1.8.71, an unauthenticated attacker can register an arbitrary passkey and sub…Check if you run itEPSS 0.50%Mar 27, 2026
- High7.4cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.Check if you run itEPSS 0.27%Mar 27, 2026
- High7.8BentoML is a Python library for building online serving systems optimized for AI apps and model inference.Check if you run itEPSS 0.26%Mar 27, 2026
Sort