Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.9October is a Content Management System (CMS) and web platform.Check if you run itEPSS 0.25%Apr 21, 2026
- Medium6.5Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines.Check if you run itEPSS 0.26%Apr 21, 2026
- High8.2NVIDIA CUDA-Q contains a vulnerability in an endpoint, where an unauthenticated attacker could cause an out-of-bounds read by sending a maliciously crafted request.Check if you run itEPSS 0.32%Apr 21, 2026
- High7.7NVIDIA KAI Scheduler contains a vulnerability where an attacker could access API endpoints without authorization.Check if you run itEPSS 0.24%Apr 21, 2026
- Medium4.3NVIDIA KAI Scheduler contains a vulnerability where an attacker could cause improper authorization through cross-namespace pod references.Check if you run itEPSS 0.19%Apr 21, 2026
- Critical9.4This Critical severity OS Command Injection vulnerability was introduced in versions 9.6.0, 10.0.0, 10.1.0, 10.2.0, 11.0.0, 11.1.0, 12.0.0, and 12.1.0 of Bamboo Data Center.Check if you run itEPSS 1.34%Apr 21, 2026
- Medium6.1FreeScout is a free self-hosted help desk and shared mailbox.Check if you run itEPSS 0.20%Apr 21, 2026
- High8.9FreeScout is a free self-hosted help desk and shared mailbox.Check if you run itEPSS 0.57%Apr 21, 2026
- High7.2Visitor Management System 1.0 by sanjay1313 is vulnerable to Unrestricted File Upload in vms/php/admin_user_insert.php and vms/php/update_1.php.Check if you run itEPSS 0.81%Apr 21, 2026
- Critical9.3SQL injection vulnerability in Zeon Academy Pro by Zeon Global Tech.Check if you run itEPSS 0.24%Apr 21, 2026
- Medium5.1HTML injection vulnerability in PHP Point of Sale v19.4.Check if you run itEPSS 0.16%Apr 21, 2026
- Critical10.0Net::Dropbear versions before 0.14 for Perl contains a vulnerable version of libtomcrypt.Check if you run itEPSS 0.57%Apr 21, 2026
- Critical10.0Storable versions before 3.05 for Perl has a stack overflow.Check if you run itEPSS 0.64%Apr 21, 2026
- High8.5Vulnerability related to an unquoted search path in CivetWeb v1.16.Check if you run itEPSS 0.14%Apr 21, 2026
- High8.8The method "sock_recvfrom_into()" of "asyncio.ProacterEventLoop" (Windows only) was missing a boundary check for the data buffer when using nbytes parameter.Check if you run itEPSS 0.39%Apr 21, 2026
- High8.8In the Website module of Dolibarr ERP & CRM 22.0.4 and below, the application uses blacklist-based filtering to restrict dangerous PHP functions related to system comm…Check if you run itEPSS 0.57%Apr 21, 2026
- High8.8In Dolibarr ERP & CRM <= 22.0.4, PHP code detection and editing permission enforcement in the Website module is not applied consistently to all input parameters, allow…Check if you run itEPSS 0.27%Apr 21, 2026
- Medium6.3Dovestones Softwares AD Self Update <4.0.0.5 is vulnerable to Cross Site Request Forgery (CSRF).Check if you run itEPSS 0.10%Apr 21, 2026
- Medium6.1Dovestones Softwares ADPhonebook <4.0.1.1 has a reflected cross-site scripting (XSS) vulnerability in the search parameter of the /ADPhonebook?Department=HR endpoint.Check if you run itEPSS 0.19%Apr 21, 2026
- Medium5.3XiangShan (open-source high-performance RISC-V processor) commit edb1dfaf7d290ae99724594507dc46c2c2125384 (2024-11-28) has improper gating of its distributed CSR write…Check if you run itEPSS 0.10%Apr 21, 2026
- Medium6.5User‑Controlled HTTP Header in Fortra's GoAnywhere MFT prior to version 7.10.0 allows attackers to trigger a DNS lookup, as well as DNS Rebinding and Information Disclosure.Check if you run itEPSS 0.23%Apr 21, 2026
- Medium5.4HTML injection is possible in system generated emails in Fortra's GoAnywhere MFT prior to 7.10.0.Check if you run itEPSS 0.15%Apr 21, 2026
- Medium4.3An improper session timeout issue in Fortra's GoAnywhere MFT prior to version 7.10.0 results in SAML configured Web Users being redirected to the regular login page in…Check if you run itEPSS 0.18%Apr 21, 2026
- Medium5.3HCL BigFix Service Management (SM) Discovery is vulnerable to unenforced encryption due to port 80 (HTTP) being open, allowing unencrypted access.Check if you run itEPSS 0.09%Apr 21, 2026
- High8.2HCL BigFix Service Management is susceptible to HTTP Request Smuggling.Check if you run itEPSS 0.18%Apr 21, 2026
Sort