Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.6A stack-based buffer overflow vulnerability was found in the VPN Clients on the ADM.Check if you run itEPSS 0.76%Apr 20, 2026
- Low2.1A vulnerability was detected in langflow-ai langflow up to 1.8.3.Check if you run itEPSS 0.39%Apr 20, 2026
- Medium6.8The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses.Check if you run itEPSS 0.48%Apr 18, 2026
- Medium6.1The Hostel plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'shortcode_id' parameter in all versions up to, and including, 1.1.6 due to ins…Check if you run itEPSS 0.32%Apr 18, 2026
- High7.5SecureDrop Client is a desktop app for journalists to securely communicate with sources and handle submissions on the SecureDrop Workstation.Check if you run itEPSS 0.53%Apr 18, 2026
- High8.7xrdp is an open source RDP server.Check if you run itEPSS 1.04%Apr 17, 2026
- Medium6.3xrdp is an open source RDP server.Check if you run itEPSS 0.59%Apr 17, 2026
- High8.1Anviz CrossChex Standard lacks source verification in the client/server channel, enabling TCP packet injection by an attacker on the same network to alter or disrupt a…Check if you run itEPSS 0.38%Apr 17, 2026
- High7.5The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to Path Traversal leading to Arbitrary File Read in versions up to and inc…Check if you run itEPSS 0.59%Apr 17, 2026
- High7.5Firebird is an open-source relational database management system.Check if you run itEPSS 0.18%Apr 17, 2026
- High7.8Dell PowerProtect Data Domain BoostFS for client of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release ver…Check if you run itEPSS 0.11%Apr 17, 2026
- Medium6.2Insufficiently Protected Credentials vulnerability in Sparx Systems Pty Ltd.Check if you run itEPSS 0.15%Apr 17, 2026
- Medium4.3The cms-fuer-motorrad-werkstaetten plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to and including 1.0.0.Check if you run itEPSS 0.26%Apr 17, 2026
- Medium5.3The LatePoint plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.3.2.Check if you run itEPSS 0.64%Apr 17, 2026
- Medium4.9The Form Maker by 10Web plugin for WordPress is vulnerable to SQL Injection via the 'ip_search', 'startdate', 'enddate', 'username_search', and 'useremail_search' para…Check if you run itEPSS 0.51%Apr 17, 2026
- High8.6Cloud Foundry UUA is vulnerable to a bypass that allows an attacker to obtain a token for any user and gain access to UAA-protected systems.Check if you run itEPSS 0.36%Apr 17, 2026
- Critical9.0SiYuan is an open-source personal knowledge management system.Check if you run itEPSS 0.53%Apr 16, 2026
- Medium4.3Vision Helpdesk before 5.7.0 (patched in 5.6.10) allows attackers to read user profiles via modified serialized cookie data to vis_client_id.Check if you run itEPSS 0.17%Apr 16, 2026
- High7.5ngtcp2 is a C implementation of the IETF QUIC protocol.Check if you run itEPSS 0.95%Apr 16, 2026
- Medium4.8Cryptomator is an open-source client-side encryption application for cloud storage.Check if you run itEPSS 0.14%Apr 16, 2026
- High8.3Improper validation of bash commands in Snowflake Cortex Code CLI versions prior to 1.0.25 allowed subsequent commands to execute outside the sandbox.Check if you run itEPSS 0.48%Apr 16, 2026
- Medium5.1Dell Client Platform BIOS contains a Weak Password Recovery Mechanism vulnerability.Check if you run itEPSS 0.18%Apr 16, 2026
- Medium5.7Insufficiently Protected Credentials in Sparx Systems Pty Ltd.Check if you run itEPSS 0.11%Apr 16, 2026
- High8.8The Career Section plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to Path Traversal and Arbitrary File Deletion in all versions up to, and including, 1.6.Check if you run itEPSS 0.41%Apr 16, 2026
- High7.1LINE client for iOS versions prior to 26.3.0 contains a vulnerability in the in-app browser where opening a crafted web page can repeatedly trigger OS-level dialogs du…Check if you run itEPSS 0.34%Apr 16, 2026