Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.8ZDI-26-587: Ashlar-Vellum Cobalt VS File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityCheck if you run itEPSS 0.23%Aug 24, 2026
- High7.1ZDI-26-589: BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution VulnerabilityCheck if you run itEPSS 0.27%Aug 24, 2026
- Critical9.8ZDI-26-590: libwebsockets HTTP/2 HPACK Path Header Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityCheck if you run itEPSS 0.65%Aug 24, 2026
- Medium4.0ZDI-26-588: Fabric.js loadFromJSON Server-Side Request Forgery VulnerabilityCheck if you run itEPSS 0.15%Aug 24, 2026
- Low3.3ZDI-26-726: Foxit PDF Reader Doc Object Use-After-Free Information Disclosure VulnerabilityCheck if you run itEPSS 0.17%Aug 24, 2026
- High7.8ZDI-26-727: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution VulnerabilityCheck if you run itEPSS 0.17%Aug 24, 2026
- High7.8ZDI-26-603: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution VulnerabilityCheck if you run itEPSS 0.17%Aug 24, 2026
- High7.8ZDI-26-604: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution VulnerabilityCheck if you run itEPSS 0.17%Aug 24, 2026
- Medium6.9A vulnerability was determined in jQWidgets up to 24.0.1.Check if you run itEPSS 0.58%Aug 24, 2026
- High8.4exceljs through 4.4.0 fails to neutralize leading equals, plus, minus, or at signs in cell values written to CSV output.Check if you run itEPSS 0.41%Aug 24, 2026
- High8.7exceljs through 4.4.0 contains a path traversal vulnerability in the Workbook.addImage() function that fails to validate file paths.Check if you run itEPSS 0.51%Aug 24, 2026
- Critical9.3exceljs through 4.4.0 contains a prototype pollution vulnerability in the deepMerge helper that fails to reject __proto__, constructor, or prototype keys when merging note objects.Check if you run itEPSS 0.60%Aug 24, 2026
- High8.7exceljs through 4.4.0 decompresses all entries from supplied xlsx archives into memory without limits on entry size, total size, or compression ratio.Check if you run itEPSS 0.63%Aug 24, 2026
- Medium6.9BentoML's outbound connection safeguard (make_safe_connect in _internal/utils/uri.py) blocks private, loopback, and link-local IP addresses but fails to reject the RFC…Check if you run itEPSS 0.41%Aug 24, 2026
- Low2.1A flaw has been found in Open5GS 2.8.0.Check if you run itEPSS 0.37%Aug 24, 2026
- Low2.1A vulnerability was detected in Open5GS 2.8.0.Check if you run itEPSS 0.28%Aug 24, 2026
- Low2.1A security vulnerability has been detected in Open5GS 2.8.0.Check if you run itEPSS 0.56%Aug 24, 2026
- UnknownIncorrect Privilege AssignmentPatch nowKEVEPSS 0.48%Aug 24, 2026
- High7.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Super Forms allows Path Traversal.Patch nowKEVEPSS 0.50%Aug 24, 2026
- UnknownImproper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.54%Aug 24, 2026
- UnknownImproper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 0.37%Aug 24, 2026
- Low2.1A vulnerability has been found in CTFd up to 3.8.4.Check if you run itEPSS 0.56%Aug 23, 2026
- Critical9.8DBD::Pg version 3.21.0 for Perl has a heap out-of-bounds write in quote_float.Check if you run itEPSS 0.67%Aug 23, 2026
- Low3.7Apache::AppSamurai::Util versions through 1.01 for Perl generate predictable session authentication keys from the clock and process id in CreateSessionAuthKey.Check if you run itEPSS 0.44%Aug 23, 2026
- Medium5.3Reverse::Proxy versions before 0.04 for Perl allow HTTP request smuggling via a percent-decoded PATH_INFO written unencoded to the upstream request line.Check if you run itEPSS 0.42%Aug 23, 2026
Sort