Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9Keygraph Shannon contains a hard-coded API key in its router configuration that, when the router component is enabled and exposed, allows network attackers to authenti…Check if you run itEPSS 0.26%Mar 9, 2026
- Critical9.8An issue pertaining to CWE-78: Improper Neutralization of Special Elements used in an OS Command was discovered in linagora Twake v2023.Q1.1223.Check if you run itEPSS 0.40%Mar 9, 2026
- High8.8An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in linagora Twake v2023.Q1.1223.Check if you run itEPSS 0.36%Mar 9, 2026
- High7.5An issue pertaining to CWE-1333: Inefficient Regular Expression Complexity (4.19) was discovered in mscdex ssh2 v1.17.0.Check if you run itEPSS 0.36%Mar 9, 2026
- Medium5.4An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.Check if you run itEPSS 0.25%Mar 9, 2026
- Medium6.1An issue pertaining to CWE-601: URL Redirection to Untrusted Site was discovered in linagora Twake v2023.Q1.1223.Check if you run itEPSS 0.22%Mar 9, 2026
- High8.5A command injection vulnerability was identified in the web module of Archer AXE75 v1.6/v1.0 router.Check if you run itEPSS 1.43%Mar 9, 2026
- High8.5MobaXterm versions prior to 26.1 contain an uncontrolled search path element vulnerability.Check if you run itEPSS 0.14%Mar 9, 2026
- Medium5.4An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in YMFE yapi v1.12.0.Check if you run itEPSS 0.20%Mar 9, 2026
- Medium6.5An issue pertaining to CWE-312: Cleartext Storage of Sensitive Information was discovered in lesspass lesspass v9.6.9 which allows attackers to obtain sensitive information.Check if you run itEPSS 0.17%Mar 9, 2026
- High7.5An issue pertaining to CWE-319: Cleartext Transmission of Sensitive Information was discovered in Nexusoft NexusInterface v3.2.0-beta.2.Check if you run itEPSS 0.20%Mar 9, 2026
- High7.5An issue pertaining to CWE-400: Uncontrolled Resource Consumption was discovered in Nexusoft NexusInterface v3.2.0-beta.2.Check if you run itEPSS 0.36%Mar 9, 2026
- Critical9.8An issue pertaining to CWE-829: Inclusion of Functionality from Untrusted Control Sphere was discovered in Miazzy oa-front-service master.Check if you run itEPSS 0.37%Mar 9, 2026
- Critical9.8An issue pertaining to CWE-918: Server-Side Request Forgery was discovered in oslabs-beta ThermaKube master.Check if you run itEPSS 0.34%Mar 9, 2026
- Medium5.3An issue pertaining to CWE-532: Insertion of Sensitive Information into Log File was discovered in LupinLin1 jimeng-web-mcp v2.1.2.Check if you run itEPSS 0.25%Mar 9, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: fs/xattr: missing fdput() in fremovexattr error path In the Linux kernel, the fremovexattr() syscal…Check if you run itEPSS 0.22%Mar 9, 2026
- High7.5An issue pertaining to CWE-400: Uncontrolled Resource Consumption was discovered in YMFE yapi v1.12.0 and allows attackers to cause a denial of service.Check if you run itEPSS 0.36%Mar 9, 2026
- Medium6.2GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF .debug_rnglists data.Check if you run itEPSS 0.18%Mar 9, 2026
- Medium6.2GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF loclists data.Check if you run itEPSS 0.16%Mar 9, 2026
- Medium4.3Malicious scripts could display attacker-controlled web content under spoofed domains in Focus for iOS by stalling a _self navigation to an invalid port and triggering…Check if you run itEPSS 0.19%Mar 9, 2026
- High7.5Due to a programming error, blocklistd leaks a socket descriptor for each adverse event report it receives.Check if you run itEPSS 0.38%Mar 9, 2026
- Medium4.4Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permission to read-only wrapped user-mode memory.Check if you run itEPSS 0.13%Mar 9, 2026
- Medium5.5A vulnerability was detected in SourceCodester Patients Waiting Area Queue Management System 1.0.Check if you run itEPSS 0.53%Mar 9, 2026
- High7.5If two sibling jails are restricted to separate filesystem trees, which is to say that neither of the two jail root directories is an ancestor of the other, jailed pro…Check if you run itEPSS 0.12%Mar 9, 2026
- High8.8By default, jailed processes cannot mount filesystems, including nullfs(4).Check if you run itEPSS 0.12%Mar 9, 2026
Sort