Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5A Remote Code Execution vulnerability was found in CODEASTRO Membership Management System v1.0 in /add_members.php.Check if you run itEPSS 0.26%May 7, 2026
- Medium5.4Cross-Site Scripting (XSS) vulnerability exists in Webkul Krayin CRM v2.1.5.Check if you run itEPSS 0.21%May 7, 2026
- High7.5Regex Denial of Service in youtube-regex npm package through version 1.0.5.Check if you run itEPSS 0.28%May 7, 2026
- Critical9.8NPM package query-parser-string 1.0.0 is vulnerable to Prototype Pollution.Check if you run itEPSS 0.48%May 7, 2026
- Critical9.8npm package parse-ini v1.0.6 is vulnerable to Prototype Pollution in index.js().Check if you run itEPSS 0.42%May 7, 2026
- Medium6.8Medtronic MyCareLink Patient Monitor uses per-product credentials that are stored in a recoverable format.Check if you run itEPSS 0.13%May 7, 2026
- Medium6.8Medtronic MyCareLink Patient Monitor has an internal serial interface, which allows an attacker with physical access to access a login prompt via a UART terminal.Check if you run itEPSS 0.16%May 7, 2026
- High7.1Daptin is a GraphQL/JSON-API headless CMS.Check if you run itEPSS 0.30%May 7, 2026
- Medium4.3Weblate is a web based localization tool.Check if you run itEPSS 0.27%May 7, 2026
- Medium4.3Weblate is a web based localization tool.Check if you run itEPSS 0.34%May 7, 2026
- High7.4A flaw was found in gnutls.Check if you run itEPSS 0.47%May 7, 2026
- Medium6.0Wallos is an open-source, self-hostable personal subscription tracker.Check if you run itEPSS 0.18%May 7, 2026
- High7.7Wallos is an open-source, self-hostable personal subscription tracker.Check if you run itEPSS 0.23%May 7, 2026
- Medium4.3Wallos is an open-source, self-hostable personal subscription tracker.Check if you run itEPSS 0.20%May 7, 2026
- Medium5.3Weblate is a web based localization tool.Check if you run itEPSS 0.37%May 7, 2026
- Medium6.1fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks.Check if you run itEPSS 0.24%May 7, 2026
- Medium5.4Weblate is a web based localization tool.Check if you run itEPSS 0.27%May 7, 2026
- High8.7RELATE is a web-based courseware package.Check if you run itEPSS 0.26%May 7, 2026
- High8.3Daptin is a GraphQL/JSON-API headless CMS.Check if you run itEPSS 0.34%May 7, 2026
- Critical9.8ChestnutCMS v1.5.10 has a SQL injection vulnerability.Check if you run itEPSS 0.37%May 7, 2026
- Medium6.9Uncontrolled Resource Consumption vulnerability in ericmj decimal allows unauthenticated remote Denial of Service.Check if you run itEPSS 0.48%May 7, 2026
- Medium6.1Sidekiq-cron thru 2.3.1, an open-source scheduling add-on for Sidekiq, is vulnerable to a cross-site scripting (xss) vulnerability via crafted URL being rended from cron.erb.Check if you run itEPSS 0.19%May 7, 2026
- Critical9.8NPM package next-npm-version1.0.1 is vulnerable to Command injection.Check if you run itEPSS 1.52%May 7, 2026
- High8.8NPM package node-ts-ocr 1.0.15 is vulnerable to OS Command Injection via the invokeImageOcr function in src/index.js.Check if you run itEPSS 1.19%May 7, 2026
- Critical9.6URL redirection to untrusted site ('open redirect') vulnerability in DivvyDrive Information Technologies Inc.Check if you run itEPSS 0.23%May 7, 2026
Sort