Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5A security vulnerability has been detected in code-projects Feedback System 1.0.Check if you run itEPSS 0.25%May 7, 2026
- Low2.1A security flaw has been discovered in CodeAstro Online Classroom 1.0.Check if you run itEPSS 0.19%May 7, 2026
- High8.5n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations.Check if you run itEPSS 0.21%May 7, 2026
- High8.6Inngest is a platform for running event-driven and scheduled background functions with queueing, retries, and step orchestration.Check if you run itEPSS 0.38%May 7, 2026
- Medium4.7i18nextify is a JavaScript library that adds website internationalization via a script tag, without source code changes.Check if you run itEPSS 0.14%May 7, 2026
- Critical9.1Copilot said: i18nextify is a JavaScript library that adds i18nextify is a JavaScript library that adds website internationalization via a script tag, without source code changes.Check if you run itEPSS 0.31%May 7, 2026
- High8.7BerriAI LiteLLM Command Injection VulnerabilityPatch nowKEVEPSS 91.44%May 7, 2026
- Medium6.5VINCE versions 3.0.38 and earlier do not properly verify the From address authenticity due to encoding confusion and use the from address for automated actions such as…Check if you run itEPSS 0.11%May 7, 2026
- Low1.9A weakness has been identified in OSGeo gdal up to 3.13.0dev-4.Check if you run itEPSS 0.25%May 7, 2026
- Low1.9A security flaw has been discovered in OSGeo gdal up to 3.13.0dev-4.Check if you run itEPSS 0.22%May 7, 2026
- Medium5.1manage.get.gov is the .gov TLD registrar maintained by CISA.Check if you run itEPSS 0.40%May 7, 2026
- High7.5A malicious module proxy can exploit a flaw in the go command's validation of module checksums to bypass checksum database validation.Check if you run itEPSS 0.23%May 7, 2026
- High7.5Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322.Check if you run itEPSS 0.80%May 7, 2026
- Medium5.1Saltcorn is an extensible, open source, no-code database application builder.Check if you run itEPSS 0.34%May 7, 2026
- Medium5.3ParquetSharp is a .NET library for reading and writing Apache Parquet files.Check if you run itEPSS 0.27%May 7, 2026
- High8.1Budibase is an open-source low-code platform.Check if you run itEPSS 0.28%May 7, 2026
- High8.2PJSIP is a free and open source multimedia communication library written in C.Check if you run itEPSS 0.16%May 7, 2026
- High7.5The Dial and LookupPort functions panic on Windows when provided with an input containing a NUL (0).Check if you run itEPSS 0.63%May 7, 2026
- Medium6.1If a trusted template author were to write a tag containing an empty 'type' attribute or a 'type' attribute with an ASCII whitespace, the execution of the template wou…Check if you run itEPSS 0.37%May 7, 2026
- Medium5.3ReverseProxy can forward queries containing parameters not visible to Rewrite functions.Check if you run itEPSS 0.39%May 7, 2026
- Medium6.1CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a tag's attribute.Check if you run itEPSS 0.31%May 7, 2026
- High7.5Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations.Check if you run itEPSS 0.78%May 7, 2026
- Medium5.3The "go bug" command writes to two files with predictable names in the system temporary directory (for example, "/tmp").Check if you run itEPSS 0.18%May 7, 2026
- Medium5.9The "go tool pack" subcommand (usually used only by the compiler as an internal tool with known-good inputs) does not sanitize output filenames.Check if you run itEPSS 0.17%May 7, 2026
- High7.5When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.Check if you run itEPSS 0.88%May 7, 2026
Sort