Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1Vikunja is an open-source self-hosted task management platform.Check if you run itEPSS 0.38%Mar 24, 2026
- Medium6.5ConcreteCMS v9.4.7 contains a Denial of Service (DoS) vulnerability in the File Manager component.Check if you run itEPSS 0.30%Mar 24, 2026
- Medium6.1iCMS v8.0.0 contains a Cross-Site Scripting (XSS) vulnerability in the User Management component, specifically within the index.html file.Check if you run itEPSS 0.21%Mar 24, 2026
- Medium6.5SQL injection in Solicitante::resetaSenha() in esiclivre/esiclivre v0.2.2 and earlier allows unauthenticated remote attackers to gain unauthorized access to sensitive…Check if you run itEPSS 0.55%Mar 24, 2026
- High7.5An issue in Free5GC v.4.2.0 and before allows a remote attacker to cause a denial of service via the function HandleAuthenticationFailure of the component AMFCheck if you run itEPSS 0.41%Mar 24, 2026
- Medium6.3NGINX Plus and NGINX Open Source have a vulnerability in the ngx_mail_smtp_module module due to the improper handling of CRLF sequences in DNS responses.Check if you run itEPSS 0.27%Mar 24, 2026
- High8.8ZDI-26-578: NGINX HTTP Dav Module Alias Directive Integer Underflow Remote Code Execution VulnerabilityCheck this weekEPSS 25.94%Mar 24, 2026
- High8.7When the ngx_mail_auth_http_module module is enabled on NGINX Plus or NGINX Open Source, undisclosed requests can cause worker processes to terminate.Check if you run itEPSS 0.95%Mar 24, 2026
- High8.7Langflow is a tool for building and deploying AI-powered agents and workflows.Patch nowKEVEPSS 19.58%Mar 24, 2026
- High7.5Langflow is a tool for building and deploying AI-powered agents and workflows.Check if you run itEPSS 5.94%Mar 24, 2026
- High7.5DiceBear is an avatar library for designers and developers.Check if you run itEPSS 0.38%Mar 24, 2026
- Medium4.7DiceBear is an avatar library for designers and developers.Check if you run itEPSS 0.19%Mar 24, 2026
- High8.8Intake is a package for finding, investigating, loading and disseminating data.Check if you run itEPSS 0.44%Mar 24, 2026
- Critical9.1Langflow is a tool for building and deploying AI-powered agents and workflows.Check if you run itEPSS 3.15%Mar 24, 2026
- Critical9.9Langflow is a tool for building and deploying AI-powered agents and workflows.Patch nowKEVEPSS 13.47%Mar 24, 2026
- High8.7PhreeBooks ERP 5.2.3 contains a remote code execution vulnerability in the image manager that allows authenticated attackers to upload and execute arbitrary PHP files…Check if you run itEPSS 0.81%Mar 24, 2026
- Critical9.3Tabs Mail Carrier 2.5.1 contains a buffer overflow vulnerability in the MAIL FROM SMTP command that allows remote attackers to execute arbitrary code by sending a craf…Check if you run itEPSS 0.93%Mar 24, 2026
- Medium6.9WinAVI iPod/3GP/MP4/PSP Converter 4.4.2 contains a denial of service vulnerability that allows local attackers to crash the application by processing malformed AVI files.Check if you run itEPSS 0.18%Mar 24, 2026
- Medium6.9WinMPG Video Convert 9.3.5 and older versions contain a buffer overflow vulnerability in the registration dialog that allows local attackers to crash the application b…Check if you run itEPSS 0.24%Mar 24, 2026
- High8.8eNdonesia Portal v8.7 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code…Check if you run itEPSS 0.35%Mar 24, 2026
- High8.8Bootstrapy CMS contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code throug…Check if you run itEPSS 0.27%Mar 24, 2026
- High8.8Netartmedia Vlog System contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the…Check if you run itEPSS 0.27%Mar 24, 2026
- High8.8Inout Article Base CMS contains SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries through the 'p' and 'u' parameters.Check if you run itEPSS 0.34%Mar 24, 2026
- High8.8Matrimony Website Script M-Plus contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries by injecting SQL co…Check if you run itEPSS 0.34%Mar 24, 2026
- High7.1Meeplace Business Review Script contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious c…Check if you run itEPSS 0.30%Mar 24, 2026
Sort