Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1A vulnerability in the web-based user interface of Cisco Webex Meetings could have allowed an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack.Check if you run itEPSS 0.18%Jun 3, 2026
- Medium6.1A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to load arbitrary files from remote locations into an active user session on an affect…Check if you run itEPSS 0.18%Jun 3, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Recover from panthor_gpu_flush_caches() failures We have seen a few cases where the wh…Check if you run itEPSS 0.15%Jun 3, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Add missing NULL check for alloc_workqueue() alloc_workqueue() can return NULL on me…Check if you run itEPSS 0.16%Jun 3, 2026
- High7.1Dräger SC Monitoring devices (SC 6002XL, SC 6802XL, SC 7000, SC 8000, SC 9000 XL) contain a denial-of-service vulnerability in all software versions that allows unauth…Check if you run itEPSS 0.20%Jun 3, 2026
- High8.8A vulnerability in jupyter-server versions 1.12.0 through 2.17.0 allows an attacker to bypass CORS origin validation when the configuration is used.Check if you run itEPSS 5.21%Jun 3, 2026
- High7.0GLPI is a free asset and IT management software package.Check if you run itEPSS 0.25%Jun 3, 2026
- High8.4GLPI is a free asset and IT management software package.Check if you run itEPSS 0.34%Jun 3, 2026
- Medium5.9GLPI is a free asset and IT management software package.Check if you run itEPSS 0.24%Jun 3, 2026
- High7.0GLPI is a free asset and IT management software package.Check if you run itEPSS 0.30%Jun 3, 2026
- High7.0GLPI is a free asset and IT management software package.Check if you run itEPSS 0.35%Jun 3, 2026
- Medium6.3unicodedata.normalize() can take excessive CPU time when processing specially crafted Unicode input containing long runs of combining characters with alternating Canon…Check if you run itEPSS 0.49%Jun 3, 2026
- High7.5An integer underflow in the BGPUpdate.DecodeFromBytes function (/bgp/bgp.go) of gobgp v4.3.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafte…Check if you run itEPSS 0.28%Jun 3, 2026
- Critical9.0RockRMS v16.13 and before v.17.7.0 is vulnerable to Cross Site Scripting (XSS) via Social Media links in user profile.Check if you run itEPSS 0.30%Jun 3, 2026
- Critical9.8An OS command injection vulnerability in the app.py component of openlabs docker-wkhtmltopdf-aas up to commit 9f50579 allows attackers to execute arbitrary commands vi…Check if you run itEPSS 1.49%Jun 3, 2026
- High7.8A DLL hijacking vulnerability in Wassimulator (GitHub) CactusViewer v2.3.0 allows attackers to escalate privileges and execute arbitrary code via a crafted DLL.Check if you run itEPSS 0.14%Jun 3, 2026
- Medium5.1backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of Laravel packages that help users build custom administration panels.Check if you run itEPSS 0.30%Jun 3, 2026
- Low2.3An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6.Check if you run itEPSS 0.27%Jun 3, 2026
- Low2.3An issue was discovered in Django 6.0 before 6.0.6 and 5.2 before 5.2.15.Check if you run itEPSS 0.15%Jun 3, 2026
- Low2.3An issue was discovered in Django 6.0 before 6.0.6 and 5.2 before 5.2.15.Check if you run itEPSS 0.24%Jun 3, 2026
- Critical9.6A vulnerability in the LightGlue model loading path of huggingface/transformers version 5.2.0 allows an attacker-controlled model repository to execute arbitrary code…Check if you run itEPSS 0.60%Jun 3, 2026
- Low2.3An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6.Check if you run itEPSS 0.37%Jun 3, 2026
- Medium6.9ProjectsAndPrograms school-management-system uses predictable credentials by generating student's and teacher's passwords solely from the user’s date of birth (e.g., 1…Check if you run itEPSS 0.25%Jun 3, 2026
- Medium5.1ProjectsAndPrograms school-management-system is vulnerable to Stored Cross‑Site Scripting (XSS) in multiple attributes of students and teachers objects.Check if you run itEPSS 0.29%Jun 3, 2026
- Medium5.3daphne before 4.2.2 reconstructs a raw HTTP request from Twisted's parsed headers and feeds it to autobahn for WebSocket handshake processing.Check if you run itEPSS 0.17%Jun 3, 2026
Sort