Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7HKUDS OpenHarness contains a remote code execution vulnerability in the /bridge slash command that allows remote senders accepted by configuration to execute arbitrary…Check if you run itEPSS 0.65%Apr 30, 2026
- High7.4A vulnerability was detected in code-projects for Plugin 4.1.2cu.5137.Check if you run itEPSS 0.45%Apr 30, 2026
- Low2.1A security vulnerability has been detected in LinkStackOrg LinkStack up to 4.8.6.Check if you run itEPSS 0.26%Apr 30, 2026
- High8.8IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow allows an attacker to execute arbitrary commands with the privileges of the process running Langflow.Check if you run itEPSS 0.47%Apr 30, 2026
- High8.1IBM Langflow OSS 1.0.0 through 1.8.4 could allow any user to supply a flow_id to read transaction logs and vertex build data belonging to other users, and to delete pe…Check if you run itEPSS 0.20%Apr 30, 2026
- High7.8IBM Turbonomic prometurbo agent 8.16.0 through 8.17.6 IBM Turbonomic Application Resource Management grants excessive cluster‑wide permissions, including unrestricted…Check if you run itEPSS 0.13%Apr 30, 2026
- Critical9.1In Exim before 4.99.2, when the SPA authentication driver is used with an adversarial SPA resource, there can be an out-of-bounds write that crashes the connection ins…Check if you run itEPSS 0.37%Apr 30, 2026
- Medium5.3In Exim before 4.99.2, when utf8 operators are enabled, there is an out-of-bounds read if large UTF-8 trailing characters are present (malformed UTF-8 header data).Check if you run itEPSS 0.25%Apr 30, 2026
- Critical9.8In Exim before 4.99.2, when JSON lookup is enabled, an out-of-bounds heap write can occur when a JSON operator encounters malformed JSON in an untrusted header, becaus…Check if you run itEPSS 0.32%Apr 30, 2026
- High7.5In Exim before 4.99.2, on systems using musl libc (not glibc), an attacker can crash the connection instance when malformed DNS data is present in PTR records.Check if you run itEPSS 0.36%Apr 30, 2026
- Medium6.5IBM Langflow Desktop <=1.8.4 Langflow could allow a remote attacker to traverse directories on the system.Check if you run itEPSS 0.37%Apr 30, 2026
- Critical9.8IBM i 7.6, 7.5, 7.4, 7.3, and 7.2 s vulnerable to privilege escalation caused by an invalid IBM i Web Administration GUI authorization check.Check if you run itEPSS 0.20%Apr 30, 2026
- Medium6.5IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow an authenticated user to cause a denial…Check if you run itEPSS 0.34%Apr 30, 2026
- Medium5.5IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.3.0, 5.3.1 stores user credentials in plain text which can be read by a local user.Check if you run itEPSS 0.09%Apr 30, 2026
- High7.5IBM watsonx.data 2.2 through 2.3 IBM Lakehouse does not properly restrict communication between pods which could allow an attacker to transfer data between pods withou…Check if you run itEPSS 0.19%Apr 30, 2026
- Medium6.5IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow an authenticated user to cause a denial…Check if you run itEPSS 0.24%Apr 30, 2026
- Medium5.3IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow an authenticated user to cause a denial…Check if you run itEPSS 0.22%Apr 30, 2026
- Low2.0A weakness has been identified in LinkStackOrg LinkStack up to 4.8.6.Check if you run itEPSS 0.25%Apr 30, 2026
- High8.6SSCMS v7.4.0 contains a SQL injection vulnerability in the stl:sqlContent tag where the queryString attribute is passed directly to database execution without paramete…Check if you run itEPSS 0.53%Apr 30, 2026
- Medium4.6Notepad++ 8.9.3 contains a format string injection vulnerability in the Find Results panel handler that allows attackers to cause denial of service and information dis…Check if you run itEPSS 0.19%Apr 30, 2026
- High7.5IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow could allow an unauthenticated user to view other users' images due to an indirect object reference through a user-controlled key.Check if you run itEPSS 0.34%Apr 30, 2026
- Medium6.5IBM Langflow Desktop 1.2.0 through 1.8.4 Langflow could allow an authenticated attacker to traverse directories on the system.Check if you run itEPSS 0.27%Apr 30, 2026
- Medium6.3Traefik is an HTTP reverse proxy and load balancer.Check if you run itEPSS 0.37%Apr 30, 2026
- Medium4.8Traefik is an HTTP reverse proxy and load balancer.Check if you run itEPSS 0.25%Apr 30, 2026
- Medium6.8CVE-2026-40951 is a memory corruption vulnerability on Secure Access Windows clients prior to 14.50.Check if you run itEPSS 0.10%Apr 30, 2026
Sort