Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.2wpDiscuz before 7.6.47 contains an SQL injection vulnerability in the getAllSubscriptions() function where string parameters lack proper quote escaping in SQL queries.Check if you run itEPSS 0.32%Mar 13, 2026
- High8.8Voltronic Power SNMP Web Pro version 1.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to access privileged management function…Check if you run itEPSS 0.29%Mar 13, 2026
- Medium5.1Beghelli Sicuro24 SicuroWeb contains a template injection vulnerability that allows attackers to inject arbitrary AngularJS expressions by exploiting improper renderin…Check if you run itEPSS 0.36%Mar 13, 2026
- Medium5.3wpDiscuz before 7.6.47 contains a stored cross-site scripting vulnerability in the inline comment preview functionality that allows authenticated users to inject malic…Check if you run itEPSS 0.18%Mar 13, 2026
- High8.7wpDiscuz before 7.6.47 contains an unauthenticated denial of service vulnerability that allows anonymous users to trigger mass notification emails by exploiting the ch…Check if you run itEPSS 0.56%Mar 13, 2026
- High7.7The web interface on multiple Omada switches does not adequately validate certain external inputs, which may lead to out-of-bound memory access when processing crafted requests.Check if you run itEPSS 0.96%Mar 13, 2026
- Medium6.4A container privilege escalation flaw was found in certain Multi-Cloud Object Gateway Core images.Check if you run itEPSS 0.18%Mar 13, 2026
- High7.8In UNIX Fourth Research Edition (v4), the su command is vulnerable to a buffer overflow due to the 'password' variable having a fixed size of 100 bytes.Check if you run itEPSS 0.19%Mar 13, 2026
- Medium6.3Malicious configuration can lead to unauthorized file access in Apache Livy.Check if you run itEPSS 0.50%Mar 13, 2026
- Medium6.4A container privilege escalation flaw was found in certain Fuse images.Check if you run itEPSS 0.22%Mar 13, 2026
- Medium6.9The authentication mechanism for a specific feature in the EasyShare module contains a vulnerability.Check if you run itEPSS 0.17%Mar 13, 2026
- Medium5.9IBM Sterling Partner Engagement Manager 6.2.3.0 through 6.2.3.5 and 6.2.4.0 through 6.2.4.2 could allow an attacker to obtain sensitive information from the query stri…Check if you run itEPSS 0.22%Mar 13, 2026
- Medium6.5IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1, and 6.2.2.0 could disclose s…Check if you run itEPSS 0.26%Mar 13, 2026
- High7.5IBM Sterling Partner Engagement Manager 6.2.3.0 through 6.2.3.5 and 6.2.4.0 through 6.2.4.2 could allow a remote attacker to obtain sensitive information when detailed…Check if you run itEPSS 0.35%Mar 13, 2026
- High7.5IBM Sterling Partner Engagement Manager 6.2.3.0 through 6.2.3.5 and 6.2.4.0 through 6.2.4.2 could allow an attacker to obtain sensitive user information using an expir…Check if you run itEPSS 0.18%Mar 13, 2026
- High7.5IBM Sterling Partner Engagement Manager 6.2.3.0 through 6.2.3.5 and 6.2.4.0 through 6.2.4.2 could allow a remote attacker to obtain sensitive information in cleartext…Check if you run itEPSS 0.19%Mar 13, 2026
- Medium5.9This is an uncontrolled resource consumption vulnerability (CWE-400) that can lead to Denial of Service (DoS).Check if you run itEPSS 0.59%Mar 12, 2026
- High7.5undici: Undici: Denial of Service via invalid WebSocket permessage-deflate extension parameterCheck if you run itEPSS 0.91%Mar 12, 2026
- High7.5The undici WebSocket client is vulnerable to a denial-of-service attack via unbounded memory consumption during permessage-deflate decompression.Check if you run itEPSS 1.20%Mar 12, 2026
- Medium6.3Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.29%Mar 12, 2026
- Critical9.8Deno is a JavaScript, TypeScript, and WebAssembly runtime.Check if you run itEPSS 1.54%Mar 12, 2026
- Medium6.7ImageMagick is free and open-source software used for editing and manipulating digital images.Check if you run itEPSS 0.10%Mar 12, 2026
- Medium5.5Vim is an open source, command line text editor.Check if you run itEPSS 0.14%Mar 12, 2026
- Critical9.3Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.64%Mar 12, 2026
- High8.1Graphiti is a framework for building and querying temporal context graphs for AI agents.Check if you run itEPSS 0.36%Mar 12, 2026
Sort