Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5In isSameApp of NotificationManagerService.java, there is a possible persistent dos due to resource exhaustion.Check if you run itEPSS 0.07%Jun 1, 2026
- Low3.3In multiple functions of KeyguardViewMediator.java , there is a possible way to bypass lockdown mode with screen pinning due to a logic error in the code.Check if you run itEPSS 0.11%Jun 1, 2026
- High7.8In multiple functions of PipTaskOrganizer.java, there is a possible way to launch an activity from the background due to a confused deputy.Check if you run itEPSS 0.07%Jun 1, 2026
- High7.8In setUserDisclaimerAcknowledged of CarDevicePolicyService.java, there is a possible way to bypass the user dialog when adding an account to a managed device due to a…Check if you run itEPSS 0.07%Jun 1, 2026
- High7.8In many functions of ComputerEngine.java, there is a possible way to access URIs across users due to a logic error in the code.Check if you run itEPSS 0.08%Jun 1, 2026
- High7.8In multiple locations, there is a possible way to reveal images across users due to improper input validation.Check if you run itEPSS 0.09%Jun 1, 2026
- High7.1Dräger Infinity Delta, Delta XL, and Kappa patient monitors contain a denial-of-service vulnerability that allows remote attackers to cause the monitor to reboot by se…Check if you run itEPSS 0.41%Jun 1, 2026
- Medium6.9ZeusCart 4.0 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized actions on behalf of victims by crafting malicious requests.Check if you run itEPSS 0.16%Jun 1, 2026
- High8.8WP AutoSuggest 0.24 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through…Check if you run itEPSS 0.34%Jun 1, 2026
- High8.8Joomla Component JE Photo Gallery 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting malici…Check if you run itEPSS 0.34%Jun 1, 2026
- High8.6Arm Whois 3.11 contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by overwriting the structured exception handler.Check if you run itEPSS 0.16%Jun 1, 2026
- High7.1No-Cms 1.0 contains an SQL injection vulnerability in the order_by parameter of the manage_privilege export endpoint that allows authenticated attackers to manipulate…Check if you run itEPSS 0.27%Jun 1, 2026
- High7.1Paroiciel 11.20 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the eG…Check if you run itEPSS 0.27%Jun 1, 2026
- High7.1Paroiciel 11.20 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the zP…Check if you run itEPSS 0.27%Jun 1, 2026
- High8.8Paroiciel 11.20 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the…Check if you run itEPSS 0.34%Jun 1, 2026
- Critical9.3Arm Whois 3.11 contains a stack-based buffer overflow vulnerability that allows remote attackers to execute arbitrary code by supplying oversized input to the IP addre…Check if you run itEPSS 0.92%Jun 1, 2026
- Low3.7A flaw was found in gnutls.Check if you run itEPSS 0.54%Jun 1, 2026
- Low2.3The DeepAI endpoint 'https://api.deepai.org/change_user_email' accepts POST requests without any CSRF protection.Check if you run itEPSS 0.11%Jun 1, 2026
- Medium5.3Nanobot prior to version 0.2.1 contains a denial of service vulnerability in the Matrix channel media download handler that allows authenticated room members to exhaus…Check if you run itEPSS 0.27%Jun 1, 2026
- High7.0Nanobot prior to version 0.2.1 contains a server-side request forgery vulnerability in the Microsoft Teams channel handler that allows remote attackers to exfiltrate B…Check if you run itEPSS 0.38%Jun 1, 2026
- Medium5.3Nanobot prior to version 0.2.1 contains a server-side request forgery vulnerability in the web_fetch tool that allows remote attackers to reach internal or private net…Check if you run itEPSS 0.36%Jun 1, 2026
- High8.7Banana Slides through 0.4.0, patched in commit e8bc490, contains a path traversal vulnerability in the generate_image() function within the AI service backend that all…Check if you run itEPSS 0.42%Jun 1, 2026
- High7.2CodexBar prior to 0.32.0 contains an insecure temporary file handling vulnerability that allows local attackers to access sensitive credentials or tamper with build ar…Check if you run itEPSS 0.13%Jun 1, 2026
- High7.5CodexBar prior to 0.32.0 contains a privilege escalation vulnerability in the CLI installer that allows local attackers to execute arbitrary commands as root by exploi…Check if you run itEPSS 0.27%Jun 1, 2026
- High8.2FlexRIC v2.0.0 allows a single SCTP connection to bind multiple xapp_ids by sending multiple E42_SETUP_REQUESTs.Check if you run itEPSS 0.41%Jun 1, 2026
Sort