Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9Angry IP Scanner for Linux 3.5.3 contains a denial of service vulnerability that allows local attackers to crash the application by supplying malformed input to the po…Check if you run itEPSS 0.18%Apr 22, 2026
- High8.6Iperius Backup 5.8.1 contains a local buffer overflow vulnerability in the structured exception handling (SEH) mechanism that allows local attackers to execute arbitra…Check if you run itEPSS 0.21%Apr 22, 2026
- High8.6MAGIX Music Editor 3.1 contains a buffer overflow vulnerability in the FreeDB Proxy Options dialog that allows local attackers to execute arbitrary code by exploiting…Check if you run itEPSS 0.21%Apr 22, 2026
- High8.6Terminal Services Manager 3.1 contains a stack-based buffer overflow vulnerability in the computer names field that allows local attackers to execute arbitrary code by…Check if you run itEPSS 0.19%Apr 22, 2026
- High8.5An issue was discovered in guardsix (formerly Logpoint) ODBC Enrichment Plugins before 5.2.1 (5.2.1 is used in guardsix 7.9.0.0).Check if you run itEPSS 0.21%Apr 22, 2026
- Medium5.5A flaw was found in libefiboot, a component of efivar.Check if you run itEPSS 0.12%Apr 22, 2026
- High7.1A flaw was found in GNU Emacs.Check if you run itEPSS 0.11%Apr 22, 2026
- High8.8A flaw was found in InstructLab.Check if you run itEPSS 0.44%Apr 22, 2026
- Critical9.6A vulnerability in the web application allows standard users to escalate their privileges to those of a super administrator through parameter manipulation, enabling th…Check if you run itEPSS 0.29%Apr 22, 2026
- Medium6.5A vulnerability in the web application allows unauthorized users to access and manipulate sensitive data across different tenants by exploiting insecure direct object references.Check if you run itEPSS 0.21%Apr 22, 2026
- High7.6An insecure direct object reference (IDOR) vulnerability in the Fullstep V5 registration process allows authenticated users to access data belonging to other registere…Check if you run itEPSS 0.21%Apr 22, 2026
- High8.7Inadequate access control in the registration process in Fullstep V5, which could allow unauthenticated users to obtain a valid JWT token with which to interact with a…Check if you run itEPSS 0.27%Apr 22, 2026
- High8.8PackageKit is a a D-Bus abstraction layer that allows the user to manage packages in a secure way using a cross-distro, cross-architecture API.Check if you run itEPSS 0.46%Apr 22, 2026
- Medium4.9An operator allowed to use the REST API can cause the Authoritative server to produce invalid HTTPS or SVCB record data, which can in turn cause LMDB database corrupti…Check if you run itEPSS 0.42%Apr 22, 2026
- High7.5A rogue primary server may cause file descriptor exhaustion and eventually a denial of service, when a PowerDNS secondary server forwards a DNS update request to it.Check if you run itEPSS 0.39%Apr 22, 2026
- Medium6.5Incomplete escaping of LDAP queries when running with 8bit-dns enabled allows users to perform queries of internal domain subtrees.Check if you run itEPSS 0.24%Apr 22, 2026
- Critical9.8An attacker can send a notify request that causes a new secondary domain to be added to the bind backend, but causes said backend to update its configuration to an inv…Check if you run itEPSS 0.38%Apr 22, 2026
- High8.2A rogue backend can send a crafted UDP response with a query ID off by one related to the maximum configured value, triggering an out-of-bounds write leading to a deni…Check if you run itEPSS 0.73%Apr 22, 2026
- High8.1A rogue backend can send a crafted SVCB response to a Discovery of Designated Resolvers request, when requested via either the autoUpgrade (Lua) option to newServer or…Check if you run itEPSS 0.28%Apr 22, 2026
- Critical9.1A cached crafted response can cause an out-of-bounds read if custom Lua code calls getDomainListByAddress() or getAddressListByDomain() on a packet cache.Check if you run itEPSS 1.07%Apr 22, 2026
- High7.5PRSD detection denial of serviceCheck if you run itEPSS 0.35%Apr 22, 2026
- Medium6.5A client might theoretically be able to cause a mismatch between queries sent to a backend and the received responses by sending a flood of perfectly timed queries tha…Check if you run itEPSS 0.17%Apr 22, 2026
- High7.5A client can trigger excessive memory allocation by generating a lot of errors responses over a single DoQ and DoH3 connection, as some resources were not properly rel…Check if you run itEPSS 0.37%Apr 22, 2026
- High7.5A client can trigger excessive memory allocation by generating a lot of queries that are routed to an overloaded DoH backend, causing queries to accumulate into a buff…Check if you run itEPSS 0.37%Apr 22, 2026
- High7.5A client can trigger a divide by zero error leading to crash by sending a crafted DNSCrypt query.Check if you run itEPSS 0.38%Apr 22, 2026
Sort