Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.5A vulnerability in the block of the integration in Prefect version 3.6.18 allows an attacker to inject arbitrary git command-line options via the field.Check if you run itEPSS 0.30%May 24, 2026
- Medium5.5A security flaw has been discovered in NousResearch hermes-agent up to 2026.4.16.Check if you run itEPSS 0.68%May 24, 2026
- Medium5.5A vulnerability was identified in NousResearch hermes-agent up to 2026.4.16.Check if you run itEPSS 0.28%May 24, 2026
- Medium5.5A vulnerability was determined in calcom cal.diy up to 4.9.4.Check if you run itEPSS 0.41%May 24, 2026
- High7.4A vulnerability was found in Edimax EW-7438RPn up to 1.31.Check if you run itEPSS 0.45%May 24, 2026
- High7.5In GNU SASL before 2.2.3, DIGEST-MD5 has a NULL pointer dereference affecting both clients and servers, via a known token with no accompanying = character.Check if you run itEPSS 0.46%May 24, 2026
- Low2.1A vulnerability has been found in Edimax EW-7438RPn up to 1.31.Check if you run itEPSS 2.50%May 24, 2026
- High7.4A flaw has been found in Edimax EW-7438RPn up to 1.31.Check if you run itEPSS 0.45%May 24, 2026
- High7.4A vulnerability was detected in Edimax EW-7438RPn up to 1.31.Check if you run itEPSS 0.54%May 24, 2026
- High7.4A security vulnerability has been detected in Edimax EW-7438RPn up to 1.31.Check if you run itEPSS 0.45%May 24, 2026
- Low2.1A weakness has been identified in Edimax EW-7438RPn up to 1.31.Check if you run itEPSS 2.50%May 23, 2026
- Low2.1A security flaw has been discovered in SourceCodester Hospitals Patient Records Management System 1.0.Check if you run itEPSS 0.19%May 23, 2026
- High8.7D-Link DIR601 2.02NA contains a credential disclosure vulnerability that allows unauthenticated attackers to retrieve sensitive configuration data by manipulating the…Check if you run itEPSS 0.58%May 23, 2026
- Critical9.3Dolibarr ERP CRM 7.0.3 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary code by injecting PHP code through the…Check if you run itEPSS 1.70%May 23, 2026
- High8.6SIPp 3.6 and earlier contains a local buffer overflow vulnerability in command-line argument handling that allows local attackers to crash the application or execute a…Check if you run itEPSS 0.16%May 23, 2026
- High8.6Audiograbber 1.83 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by exploiting structured exception handling mechanisms.Check if you run itEPSS 0.16%May 23, 2026
- Medium5.3Joomla Component jomres 9.11.2 contains a cross-site request forgery vulnerability that allows attackers to modify user account information by tricking authenticated u…Check if you run itEPSS 0.13%May 23, 2026
- High8.7Redaxo CMS Mediapool Addon 5.5.1 and older contains an arbitrary file upload vulnerability that allows authenticated users to bypass file extension blacklist restrictions.Check if you run itEPSS 0.45%May 23, 2026
- High7.1WordPress Ultimate Form Builder Lite plugin version 1.3.7 and below contains an SQL injection vulnerability that allows authenticated attackers to manipulate database…Check if you run itEPSS 0.21%May 23, 2026
- High8.8Joomla! Component EkRishta 2.10 contains an error-based SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting…Check if you run itEPSS 0.36%May 23, 2026
- Critical9.3userSpice 4.3.24 contains a username enumeration vulnerability that allows unauthenticated attackers to discover valid usernames by sending POST requests to the existi…Check if you run itEPSS 0.43%May 23, 2026
- Medium5.1userSpice 4.3.24 contains a cross-site scripting vulnerability that allows attackers to inject malicious scripts through the X-Forwarded-For HTTP header.Check if you run itEPSS 0.15%May 23, 2026
- High8.8Joomla! Component Ek Rishta 2.10 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code thr…Check if you run itEPSS 0.36%May 23, 2026
- High7.1WordPress Contact Form Maker Plugin 1.12.20 contains SQL injection vulnerabilities that allow authenticated attackers to manipulate database queries through the FormMa…Check if you run itEPSS 0.21%May 23, 2026
- High7.1WordPress Form Maker Plugin 1.12.24 and below contains SQL injection vulnerabilities that allow authenticated attackers to manipulate database queries by injecting SQL…Check if you run itEPSS 0.20%May 23, 2026
Sort