Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4jq is a command-line JSON processor.Check if you run itEPSS 0.16%May 11, 2026
- High7.8Wellbia's XIGNCODE3 xhunter1.sys kernel driver, version 10.0.10011.16384 through 2023.12.7.78, privilege escalation vulnerability provides access to the IRP_MJ_WRITE c…Check if you run itEPSS 0.23%May 11, 2026
- Medium5.1An authenticated administrator who configures or tests LDAP connectivity in Sonatype Nexus Repository Manager versions 3.0.0 through 3.91.1 may be able to initiate uni…Check if you run itEPSS 0.17%May 11, 2026
- Medium5.4HireFlow v1.2 is vulnerable to Cross Site Scripting (XSS) in candidate_detail.html via the Resume or Feedback Comment fields via POST /candidates/add or POST /feedback/add.Check if you run itEPSS 0.21%May 11, 2026
- High8.1HireFlow v1.2 is vulnerable to Incorrect Access Control.Check if you run itEPSS 0.23%May 11, 2026
- Critical9.8HireFlow v1.2 is vulnerable to SQL injection in the /login and /search endpoints.Check if you run itEPSS 0.50%May 11, 2026
- High8.1HireFlow v1.2 does not implement CSRF token validation on any state-changing POST endpoint.Check if you run itEPSS 0.17%May 11, 2026
- High7.3D-Link DCS-932L v2.18.01 is vulnerable to Command Injection in the function sub_42EF14 of the file /bin/alphapd.Check if you run itEPSS 1.23%May 11, 2026
- High7.3SQL Injection in MuuCMF T6 v1.9.4.20260115 allows an unauthenticated attacker to compromise the entire database, achieve unauthorized administrative access, and potent…Check if you run itEPSS 0.36%May 11, 2026
- None0.0Vulnerability in Wikimedia Foundation MediaWiki.Check if you run itEPSS 0.18%May 11, 2026
- Low2.0Vulnerability in Wikimedia Foundation MediaWiki.Check if you run itEPSS 0.17%May 11, 2026
- Low1.1Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki.Check if you run itEPSS 0.23%May 11, 2026
- High8.1Command injection vulnerability in automagik-genie 2.5.27 MCP Server allows attackers to execute arbitrary commands via the view_task (aka view) in the readTranscriptF…Check if you run itEPSS 1.01%May 11, 2026
- High7.1A Server-Side Request Forgery (SSRF) vulnerability exists in MLflow versions prior to 3.9.0.Check if you run itEPSS 0.29%May 11, 2026
- High7.3dnsmasqs extract_name() function can be abused to cause a heap buffer overflow, allowing an attacker to inject false DNS cache entries, which could result in DNS looku…Check if you run itEPSS 0.61%May 11, 2026
- Low2.1Cookie Request Header Injection via Unvalidated Encoder in cow_cookie:cookie/1Check if you run itEPSS 0.15%May 11, 2026
- High7.7Grav is a file-based Web platform.Check if you run itEPSS 0.28%May 11, 2026
- Medium6.2grav-plugin-admin is the admin plugin for Grav is an HTML user interface that provides a convenient way to configure Grav and easily create and modify pages.Check if you run itEPSS 0.32%May 11, 2026
- High7.7The form plugin for Grav adds the ability to create and use forms.Check if you run itEPSS 0.74%May 11, 2026
- High8.8Grav API Plugin is a RESTful API for Grav CMS that provides full headless access to your site's content, media, configuration, users, and system management.Check if you run itEPSS 0.35%May 11, 2026
- Medium5.4The form plugin for Grav adds the ability to create and use forms.Check if you run itEPSS 0.18%May 11, 2026
- High8.8OWASP BLT is a QA testing and vulnerability disclosure platform that encompasses websites, apps, git repositories, and more.Check if you run itEPSS 0.25%May 11, 2026
- High7.6Clerk JavaScript is the official JavaScript repository for Clerk authentication.Check if you run itEPSS 0.25%May 11, 2026
- Medium6.1Cross Site Scripting vulnerability in iotgateway v.3.0.1 allows a remote attacker to execute arbitrary code via the Log Record FunctionCheck if you run itEPSS 0.23%May 11, 2026
- High8.6In Meari IoT SDK builds embedded in CloudEdge 5.5.0 (build 220), Arenti 1.8.1 (build 220), and white-label Android apps <= 1.8.x (latest observed), multiple security-c…Check if you run itEPSS 0.24%May 11, 2026
Sort