Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.7A vulnerability in mlflow/mlflow versions prior to 3.11.0 allows for the resolution of environment variables in AI Gateway secrets, which can be exploited to exfiltrat…Check if you run itEPSS 0.52%Jun 3, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fox-themes Prague allows Reflected XSS.Check if you run itEPSS 0.15%Jun 3, 2026
- Medium5.3Impact: The morgan logging middleware's :remote-user token extracts the Basic auth username from the Authorization request header and writes it to the log stream witho…Check if you run itEPSS 0.33%Jun 3, 2026
- Low2.3In Vinyl Cache before 9.0.1 and Varnish Cache before 9.0.3, a deficiency in HTTP/2 request parsing can be exploited to launch a backend request desync attack (request…Check if you run itEPSS 0.38%Jun 3, 2026
- High7.5ipmi-oem in FreeIPMI before 1.6.18 has exploitable buffer overflows on response messages.Check if you run itEPSS 0.50%Jun 3, 2026
- Low2.3A flaw has been found in dask up to 3.0.Check if you run itEPSS 0.29%Jun 3, 2026
- Medium5.5A vulnerability was detected in SourceCodester Pizzafy E-Commerce System 1.0.Check if you run itEPSS 0.28%Jun 3, 2026
- Low2.1A security vulnerability has been detected in EIPStackGroup OpENer up to 2.3.0.Check if you run itEPSS 0.24%Jun 3, 2026
- High7.5Cpanel::JSON::XS versions before 4.41 for Perl allow denial of service via UTF-8 BOM prefixed input when a decode filter callback throws.Check if you run itEPSS 0.36%Jun 3, 2026
- High7.3Cpanel::JSON::XS versions before 4.41 for Perl allow type confusion via duplicate object keys when dupkeys_as_arrayref is enabled.Check if you run itEPSS 0.25%Jun 3, 2026
- Medium5.5A vulnerability was detected in SourceCodester Online Food Ordering System 2.0.Check if you run itEPSS 0.30%Jun 3, 2026
- Low2.1A security vulnerability has been detected in SourceCodester Online Boat Reservation System 1.0.Check if you run itEPSS 0.21%Jun 3, 2026
- Medium4.3The EmergencyWP – Dead Man's switch & legacy deliverance plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.2.Check if you run itEPSS 0.13%Jun 3, 2026
- Medium4.4The Passeum Ticketing plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.0.Check if you run itEPSS 0.21%Jun 3, 2026
- Low2.1A weakness has been identified in johnhuang316 code-index-mcp up to 2.14.0.Check if you run itEPSS 0.31%Jun 3, 2026
- Low2.1A security flaw has been discovered in wonderwhy-er DesktopCommanderMCP up to 0.2.38.Check if you run itEPSS 0.35%Jun 3, 2026
- Low2.1A vulnerability was identified in wonderwhy-er DesktopCommanderMCP 0.2.37.Check if you run itEPSS 0.22%Jun 3, 2026
- High8.1DD-WRT Stack-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 4.00%Jun 3, 2026
- Medium5.7LibreChat is an enhanced ChatGPT clone that supports multiple AI providers.Check if you run itEPSS 0.27%Jun 2, 2026
- Medium6.5LibreChat is an enhanced ChatGPT clone that supports multiple AI providers.Check if you run itEPSS 0.28%Jun 2, 2026
- Medium5.3When returning errors, functions in the net/textproto package would include its input as part of the error.Check if you run itEPSS 0.37%Jun 2, 2026
- Medium4.9alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups.Check if you run itEPSS 0.32%Jun 2, 2026
- High7.1GLPI is a free asset and IT management software package.Check if you run itEPSS 0.27%Jun 2, 2026
- Critical9.1alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups.Check if you run itEPSS 0.28%Jun 2, 2026
- Critical9.6LibreChat is an enhanced ChatGPT clone that supports multiple AI providers.Check if you run itEPSS 2.79%Jun 2, 2026
Sort