Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7A vulnerability in HPE NonStop CIPSAM allows an out-of-bounds write that can corrupt buffer data.Check if you run itEPSS 0.11%Oct 15, 2026
- High8.7IntentKit 2.6.3 Executor Tool Authorization Bypass via ToolNodeCheck if you run itEPSS 0.39%Oct 15, 2026
- High7.5A vulnerability in the finger daemon of HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker to cause a denial of service.Check if you run itEPSS 0.30%Oct 15, 2026
- High8.7Ellucian WebAdvisor 3.2 Unauthenticated XXE InjectionCheck if you run itEPSS 0.34%Oct 15, 2026
- Medium5.3HPE NonStop TCP/IP UTILITIES - Denial of Service vulnerabilityCheck if you run itEPSS 0.16%Oct 15, 2026
- High8.7MoviePilot 3.1.5 Command Injection via ExecuteCommandToolCheck if you run itEPSS 1.00%Oct 15, 2026
- High7.5A security vulnerability in HPE NonStop SNMP Trap Multiplexer may cause memory corruptionCheck if you run itEPSS 0.26%Oct 15, 2026
- Medium5.3ApostropheCMS before 4.33.0 allows authentication bypass for REST API page reading, as demonstrated by a /api/v1/@apostrophecms/page?all=1 call.Check if you run itEPSS 0.25%Oct 15, 2026
- High8.7SODOLA SL902-SWTGW124AS Buffer Overflow DoS via Multipart Boundary ParserCheck if you run itEPSS 0.39%Oct 15, 2026
- Low2.8A vulnerability was detected in ggml-org whisper.cpp up to 1.9.4.Check if you run itEPSS 0.12%Oct 15, 2026
- High7.5kin-openapi is a Go project for handling OpenAPI files.Check if you run itEPSS 0.43%Oct 15, 2026
- High7.5Junrar is an open source Java RAR archive library.Check if you run itEPSS 0.40%Oct 15, 2026
- High7.5FasterXML Jackson 1.x, confirmed in jackson-mapper-asl versions 1.8.3, 1.9.2, 1.9.11, 1.9.12, and 1.9.13, allows attackers to cause a denial of service by supplying de…Check if you run itEPSS 0.34%Oct 15, 2026
- Medium5.3MessagePack: Nested arrays can blow past buffer length limitsCheck if you run itEPSS 0.65%Oct 15, 2026
- Critical9.8The Theme My Login plugin for WordPress is vulnerable to privilege escalation via account takeover in versions up to, and including, 7.2.1.Patch nowKEVEPSS 0.29%Oct 15, 2026
- High7.5A Regular-Expression Denial of Service (ReDoS) in the Markdown2.Check if you run itEPSS 0.15%Oct 15, 2026
- High7.1Document Gallery <= 5.1.1 - Reflected XSS via data-shortcode AttributePatch nowKEVEPSS 0.15%Oct 15, 2026
- Medium6.5Python Social Auth is a social authentication/registration mechanism.Check if you run itEPSS 0.15%Oct 15, 2026
- UnknownA stack overflow in the gensub_ParsePsb() function of AOC LC32D1320 v2.05 allows attackers to cause a Denial of Service (DoS) via supplying a crafted .PSB subtitle file.Check if you run itEPSS 0.17%Oct 15, 2026
- High7.5An issue in Trisolutions BRPerfX version 1.4.4.0 exposes LDAP credentials in plaintext within the administrative configuration interface.Check if you run itEPSS 0.34%Oct 15, 2026
- High7.5react/http is an event-driven, streaming HTTP client and server implementation for ReactPHP.Check if you run itEPSS 0.43%Oct 15, 2026
- Critical9.8AUTOM8N (WHM/cPanel plugin) through commit 82821f7 contains an OS Command Injection in borg_restore.cgi.Check if you run itEPSS 0.76%Oct 15, 2026
- Medium6.5tinytag is a Python library for reading audio file metadata.Check if you run itEPSS 0.25%Oct 15, 2026
- High8.7AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework.Check if you run itEPSS 0.37%Oct 15, 2026
- High8.1Improper AuthenticationPatch nowKEVEPSS 0.43%Oct 15, 2026