Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5A security flaw has been discovered in SourceCodester Pharmacy Sales and Inventory System 1.0.Check if you run itEPSS 0.25%Apr 27, 2026
- High7.3Insecure preserved inherited permissions vulnerability in Cerberus FTP Server on Windows allows Privilege Escalation.This issue has been resolved in Cerberus FTP Server: 2026.1Check if you run itEPSS 0.26%Apr 27, 2026
- Medium6.5Improper Handling of TLS Client Authentication Failure Leading to Anonymous Principal Assignment in Apache Storm Versions Affected: up to 2.8.7 Description: When TLS t…Check if you run itEPSS 0.29%Apr 27, 2026
- Medium4.8Improper Certificate Validation via Global SSL Context Downgrade in Apache Storm Prometheus Reporter Versions Affected: from 2.6.3 to 2.8.6 Description: In production…Check if you run itEPSS 0.19%Apr 27, 2026
- High8.7Allocation of Resources Without Limits or Throttling vulnerability in elixir-plug plug_cowboy allows unauthenticated remote denial of service via atom table exhaustion.Check if you run itEPSS 0.55%Apr 27, 2026
- Medium5.3Authenticated user can bypass authorization in Ribblr - Crochet & Knitting iOS applicationCheck if you run itEPSS 0.22%Apr 27, 2026
- High8.9A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521.Check if you run itEPSS 1.77%Apr 27, 2026
- High8.9A vulnerability was determined in Totolink A8000RU 7.1cu.643_b20200521.Check if you run itEPSS 1.77%Apr 27, 2026
- High8.9A vulnerability was found in Totolink A8000RU 7.1cu.643_b20200521.Check if you run itEPSS 1.77%Apr 27, 2026
- High7.5Text::Minify::XS versions from 0.3.0 before 0.7.8 for Perl have a heap overflow when processing some malformed UTF-8 characters.Check if you run itEPSS 0.44%Apr 27, 2026
- High8.9A vulnerability has been found in Totolink A8000RU 7.1cu.643_b20200521.Check if you run itEPSS 1.77%Apr 27, 2026
- High8.9A flaw has been found in Totolink A8000RU 7.1cu.643_b20200521.Check if you run itEPSS 1.95%Apr 27, 2026
- High7.4A vulnerability was detected in Tenda HG3 2.0.Check if you run itEPSS 3.27%Apr 27, 2026
- Low2.1A security vulnerability has been detected in code-projects Employee Management System 1.0.Check if you run itEPSS 0.19%Apr 27, 2026
- Low2.1A weakness has been identified in code-projects Employee Management System 1.0.Check if you run itEPSS 0.23%Apr 27, 2026
- Low2.1A security flaw has been discovered in code-projects Employee Management System 1.0.Check if you run itEPSS 0.27%Apr 27, 2026
- High7.8Document structural anomalies caused inconsistencies between page element relationships and internal index states.Check if you run itEPSS 0.18%Apr 27, 2026
- Medium5.5Flaws in page lifecycle management allow document structure changes to desynchronize internal component states, causing subsequent operations to access invalidated obj…Check if you run itEPSS 0.18%Apr 27, 2026
- High7.1Parsing logic flaws cause non-signature data to be misidentified as valid signatures when processing malformed form field hierarchies, leading to invalid memory writes…Check if you run itEPSS 0.17%Apr 27, 2026
- Medium5.5Calling a function that triggers a UI refresh after removing comments via a script may access an invalidated object, leading to program crashes.Check if you run itEPSS 0.17%Apr 27, 2026
- Medium5.5A crafted XFA PDF can trigger a use-after-free condition during calculate event processing, causing the application to crash and resulting in an arbitrary code execution.Check if you run itEPSS 0.11%Apr 27, 2026
- Medium5.5Improper control flow management allows a crafted document action chain to cause modal dialog reentry on the main thread, resulting in UI freeze and denial of service.Check if you run itEPSS 0.10%Apr 27, 2026
- Medium5.5Insufficient parameter verification leads to the occurrence of format errors in files, which will trigger an unhandled "std::invalid_argument" exception, ultimately ca…Check if you run itEPSS 0.10%Apr 27, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem Theme Elements (for Elementor) allows DOM-Base…Check if you run itEPSS 0.13%Apr 27, 2026
- Low2.1A vulnerability was identified in code-projects Employee Management System 1.0.Check if you run itEPSS 0.19%Apr 27, 2026
Sort