Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5KDE Dolphin before 25.12.3 allows applications in a Flatpak (or with AppArmor confinement) to open folders outside of the application sandbox without additional scrutiny.Check if you run itEPSS 0.13%Apr 28, 2026
- Medium5.9In Spring AI, an attacker can bypass conversation isolation and exfiltrate sensitive memory from other users’ chat histories, including secrets and credentials, by inj…Check if you run itEPSS 0.23%Apr 28, 2026
- High8.7Penetration Testing engineers at Amazon have identified a security flaw related to request handling in the web server component that could, under certain conditions, l…Check if you run itEPSS 0.19%Apr 28, 2026
- High8.5Penetration Testing engineers at Amazon discovered a vulnerability where the camera system failed to properly validate input, allowing specially crafted requests conta…Check if you run itEPSS 0.26%Apr 28, 2026
- Medium5.3Penetration Testing engineers at Amazon have discovered a flaw where the camera system fails to properly handle data supplied in certain requests, causing a service disruption.Check if you run itEPSS 0.24%Apr 28, 2026
- Medium5.5A weakness has been identified in BrowserOperator browser-operator-core up to 0.6.0.Check if you run itEPSS 0.43%Apr 28, 2026
- Low1.9A vulnerability was determined in Artifex MuPDF up to 1.28.0.Check if you run itEPSS 0.18%Apr 28, 2026
- Low2.1A vulnerability was found in SourceCodester Safety Anger Pad 1.0.Check if you run itEPSS 0.26%Apr 28, 2026
- Low2.1A vulnerability was found in code-projects Coaching Management System 1.0.Check if you run itEPSS 0.23%Apr 28, 2026
- Medium5.4The Check & Log Email WordPress plugin before 2.0.13 does not properly handle email replacement, which could allow unauthenticated users to perform Stored XSS attacks…Check if you run itEPSS 0.15%Apr 28, 2026
- High8.6In Spring AI, various FilterExpressionConverter implementations accept a filter expression object and translate them to specific vector store query languages.Check if you run itEPSS 0.39%Apr 28, 2026
- High7.5In MIT Kerberos 5 (aka krb5) before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gss_accept_sec_context() on a system…Check if you run itEPSS 0.60%Apr 28, 2026
- Medium5.5A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0.Check if you run itEPSS 0.25%Apr 28, 2026
- Medium5.5A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0.Check if you run itEPSS 0.25%Apr 28, 2026
- Medium5.5A security vulnerability has been detected in SourceCodester Pizzafy Ecommerce System 1.0.Check if you run itEPSS 0.25%Apr 28, 2026
- Medium5.5A weakness has been identified in SourceCodester Pizzafy Ecommerce System 1.0.Check if you run itEPSS 0.25%Apr 28, 2026
- Medium5.5A security flaw has been discovered in SourceCodester Pizzafy Ecommerce System 1.0.Check if you run itEPSS 0.25%Apr 28, 2026
- Medium6.4The Social Post Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Threads embed handler in all versions up to, and including, 2.0.1.Check if you run itEPSS 0.19%Apr 28, 2026
- Medium6.4The WPC Smart Messages for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'text' attribute of the shortcode in all versions up t…Check if you run itEPSS 0.19%Apr 28, 2026
- Medium6.4The Timeline Blocks for Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'titleTag' attribute of the timeline-blocks/tb-timeline-blo…Check if you run itEPSS 0.19%Apr 28, 2026
- High7.2OpenStack Ironic before 35.0.1 allows ipmitool execution in a non-default configuration that has a console interface.Check if you run itEPSS 0.57%Apr 28, 2026
- High7.5In MIT Kerberos 5 (aka krb5) before 1.22.3, there is a NULL pointer dereference if an application calls gss_accept_sec_context() on a system with a NegoEx mechanism re…Check if you run itEPSS 0.65%Apr 28, 2026
- Medium5.5A vulnerability was identified in BigSweetPotatoStudio HyperChat up to 2.0.0-alpha.63.Check if you run itEPSS 0.28%Apr 28, 2026
- Low2.0A vulnerability was determined in code-projects Coaching Management System 1.0.Check if you run itEPSS 0.23%Apr 28, 2026
- Medium5.5A vulnerability was found in TencentCloudBase CloudBase-MCP up to 2.17.0.Check if you run itEPSS 0.30%Apr 28, 2026
Sort