Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/netCheck if you run itEPSS 0.84%May 7, 2026
- Low1.9A vulnerability was identified in OSGeo gdal up to 3.13.0dev-4.Check if you run itEPSS 0.24%May 7, 2026
- Low1.9A vulnerability was determined in OSGeo gdal up to 3.13.0dev-4.Check if you run itEPSS 0.26%May 7, 2026
- Medium5.5A vulnerability was found in SourceCodester Pharmacy Sales and Inventory System 1.0.Check if you run itEPSS 0.25%May 7, 2026
- High7.8GitPython is a python library used to interact with Git repositories.Check if you run itEPSS 0.24%May 7, 2026
- High7.8GitPython is a python library used to interact with Git repositories.Check if you run itEPSS 0.42%May 7, 2026
- Critical9.8GitPython is a python library used to interact with Git repositories.Check if you run itEPSS 0.57%May 7, 2026
- High8.8GitPython is a python library used to interact with Git repositories.Check if you run itEPSS 0.75%May 7, 2026
- High7.8Notepad Next is a cross-platform, reimplementation of Notepad++.Check if you run itEPSS 0.24%May 7, 2026
- High7.1FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.Check if you run itEPSS 0.17%May 7, 2026
- High7.7FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.Check if you run itEPSS 0.21%May 7, 2026
- High7.6FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.Check if you run itEPSS 0.17%May 7, 2026
- Medium5.4FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.Check if you run itEPSS 0.26%May 7, 2026
- Critical9.1FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.Check if you run itEPSS 0.25%May 7, 2026
- High7.0BentoPDF is a client-side PDF toolkit that is self hostable.Check if you run itEPSS 0.36%May 7, 2026
- Low2.1A vulnerability has been found in router-for-me CLIProxyAPI 6.9.29.Check if you run itEPSS 0.21%May 7, 2026
- Critical9.8Insecure Permissions vulnerability in grokability snipe-it v.8.4.0 and before and fixed after 2026-03-10 commit 676a9958 allows a remote attacker to execute arbitrary…Check if you run itEPSS 0.60%May 7, 2026
- Critical9.8The MQTT broker embedded in Yarbo firmware v2.3.9 is configured to allow anonymous connections with no topic-level read or write ACLs.Check if you run itEPSS 0.54%May 7, 2026
- Critical9.8Yarbo firmware v2.3.9 contains hardcoded administrative credentials embedded in the firmware image.Check if you run itEPSS 0.53%May 7, 2026
- Critical9.8A hidden, persistent backdoor was found in Yarbo firmware v2.3.9 that provides remote, unauthenticated (or weakly authenticated) access to privileged functionality.Check if you run itEPSS 0.58%May 7, 2026
- Critical9.1Improper certificate validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unauthenticated attacker to enroll a device belonging t…Check if you run itEPSS 0.51%May 7, 2026
- Critical9.8An Improper Access Control in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unauthenticated attacker to invoke arbitrary methods.Check if you run itEPSS 0.82%May 7, 2026
- Critical9.1An Improper Certificate Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unauthenticated attacker to impersonate registered S…Check if you run itEPSS 0.69%May 7, 2026
- High8.8An Improper Access Control vulnerability in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote authenticated attacker to gain administrative access.Check this weekEPSS 11.20%May 7, 2026
- Medium5.4A Cross-Site Scripting (XSS) vulnerability was found in PHPGurukal Hospital Management System v4.0 in the /hospital/hms/edit-profile.php page.Check if you run itEPSS 0.13%May 7, 2026
Sort