Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7Dify < 1.16.0-rc1 SQL Injection via MyScale Vector Store search_by_full_textCheck if you run itEPSS 0.50%Jul 10, 2026
- Critical9.6Prowler: SAML Domain Claiming Enables Cross-Tenant Account TakeoverCheck if you run itEPSS 0.53%Jul 10, 2026
- Medium6.9Grav CMS — Improper Handling of Highly Compressed Data in Installer::unZip()Check if you run itEPSS 0.60%Jul 10, 2026
- High8.7Grav Admin Plugin — IDOR Privilege Escalation via saveUser()Check if you run itEPSS 0.27%Jul 10, 2026
- Medium6.9Excelize: Negative shared-string index causes panic in GetCellValue and GetRowsCheck if you run itEPSS 0.66%Jul 10, 2026
- High8.7Excelize: Streaming GetRows row-bound bypass causes attacker-controlled allocationCheck if you run itEPSS 0.66%Jul 10, 2026
- Critical9.3A flaw was found in the file_type content detector of guardrails-detectors.Check if you run itEPSS 0.54%Jul 10, 2026
- High8.7PraisonAI versions before 4.6.78 contain an allowlist bypass vulnerability in shell command execution that allows attackers to execute restricted commands via find's b…Check if you run itEPSS 0.73%Jul 10, 2026
- Medium6.9PraisonAI (praisonaiagents) before 1.6.78 contains a path traversal vulnerability in the FastContext feature (praisonaiagents.context.fast).Check if you run itEPSS 0.34%Jul 10, 2026
- Medium6.8PraisonAI before 4.6.78 contains a path traversal vulnerability in ContextGatherer that fails to validate include paths in .praisoncontext and .praisoninclude files.Check if you run itEPSS 0.37%Jul 10, 2026
- Medium6.9PraisonAI before 4.6.78 contains an unauthenticated server-side request forgery vulnerability in the Jobs API /api/v1/runs endpoint.Check if you run itEPSS 0.22%Jul 10, 2026
- Medium6.9PraisonAI (pip package praisonaiagents) before 1.6.78 automatically loads defaults from a project-local .praisonai/config.toml when constructing an Agent, and does not…Check if you run itEPSS 0.20%Jul 10, 2026
- Medium6.9PraisonAI before 4.6.78 contains a prompt injection defense bypass vulnerability where the injection defense only blocks threats classified as CRITICAL, requiring thre…Check if you run itEPSS 0.27%Jul 10, 2026
- High8.1In JetBrains TeamCity before 2026.1.2 pipeline modification was possible due to improper permission checksCheck if you run itEPSS 0.35%Jul 10, 2026
- Medium6.1In JetBrains TeamCity before 2026.1.2 stored XSS via unauthenticated agent registration was possibleCheck if you run itEPSS 0.34%Jul 10, 2026
- Medium5.4In JetBrains TeamCity before 2026.1.2 stored XSS on the cloud profile page was possible via agent-reported dataCheck if you run itEPSS 0.32%Jul 10, 2026
- High8.8In JetBrains TeamCity before 2026.1.2 arbitrary file access was possible via the Perforce VCS integrationCheck if you run itEPSS 0.49%Jul 10, 2026
- Critical9.8In JetBrains IntelliJ IDEA before 2026.1.4, 2026.2 code execution via path traversal in project workspace ID handling was possibleCheck if you run itEPSS 0.60%Jul 10, 2026
- Low3.5In JetBrains YouTrack before 2026.2.17012 cSS injection via Mermaid diagram rendering was possibleCheck if you run itEPSS 0.23%Jul 10, 2026
- Medium5.3n8n before 2.28.0 (and before 1.123.58 on the 1.x branch) contains a disk space exhaustion vulnerability in the data-table file upload endpoint.Check if you run itEPSS 0.39%Jul 10, 2026
- Medium6.8Stored XSS in the table panel (TableNG)Check if you run itEPSS 0.24%Jul 10, 2026
- Medium5.3Pre-authentication denial of service via the OAuth login routeCheck if you run itEPSS 0.40%Jul 10, 2026
- Low3.5In JetBrains YouTrack before 2026.2.17394 stored XSS via article titles in digest emails was possibleCheck if you run itEPSS 0.66%Jul 10, 2026
- Medium5.1Grav before 1.0.3 Stored XSS via SVG Upload APICheck if you run itEPSS 0.17%Jul 10, 2026
- High7.1Grav before 2.0.1 Decompression Bomb via ZipArchiverCheck if you run itEPSS 0.30%Jul 10, 2026
Sort