Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Rate Limiting for attempting a user login is not being properly enforced, making HCL DevOps Velocity susceptible to brute-force attacks past the unsuccessful login attempt limit.Check if you run itEPSS 0.23%Apr 13, 2026
- Medium5.5A security flaw has been discovered in code-projects Simple Content Management System 1.0.Check if you run itEPSS 0.31%Apr 13, 2026
- Medium5.5A vulnerability was identified in code-projects Simple Content Management System 1.0.Check if you run itEPSS 0.31%Apr 13, 2026
- Low2.7Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL injection in the file /rsms/admin/clients/manage_client.phpCheck if you run itEPSS 0.19%Apr 13, 2026
- Low2.7Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerale to SQL injection in the file/rsms/admin/repairs/view_details.php.Check if you run itEPSS 0.19%Apr 13, 2026
- Low2.7Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL injection in the file /rsms/admin/repairs/manage_repair.php.Check if you run itEPSS 0.19%Apr 13, 2026
- Low2.7Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in the file /orms/admin/activities/manage_activity.php.Check if you run itEPSS 0.19%Apr 13, 2026
- Low2.7Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL Injection in the file /orms/admin/rooms/manage_room.php.Check if you run itEPSS 0.19%Apr 13, 2026
- High8.8Dag Authors, who normally should not be able to execute code in the webserver context could craft XCom payload causing the webserver to execute arbitrary code.Check if you run itEPSS 0.59%Apr 13, 2026
- Critical9.8In Totara LMS v19.1.5 and before, the forgot password API does not implement rate limiting for the target email address.Check if you run itEPSS 0.40%Apr 13, 2026
- Critical9.8Totara LMS v19.1.5 and before is vulnerable to Incorrect Access Control.Check if you run itEPSS 0.39%Apr 13, 2026
- High8.0Totara LMS v19.1.5 and before is vulnerable to HTML Injection.Check if you run itEPSS 0.30%Apr 13, 2026
- High7.5A heap buffer overflow in the av_bprint_finalize() function of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input.Check if you run itEPSS 0.45%Apr 13, 2026
- High7.5An improper resource deallocation and closure vulnerability in the tools/zmqsend.c component of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) via s…Check if you run itEPSS 0.40%Apr 13, 2026
- High7.5An out-of-bounds read in the read_global_param() function (libavcodec/av1dec.c) of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input.Check if you run itEPSS 0.34%Apr 13, 2026
- Medium6.2A stack overflow in the experimental/tinyobj_loader_opt.h file of tinyobjloader commit d56555b allows attackers to cause a Denial of Service (DoS) via supplying a craf…Check if you run itEPSS 0.17%Apr 13, 2026
- High7.8A vulnerability in the class of the package, version 3.13.0, allows attacker-controlled TensorFlow SavedModels to be loaded during deserialization of models, even when .Check if you run itEPSS 0.40%Apr 13, 2026
- High7.5Before Airflow 3.2.0, it was unclear that secure Airflow deployments require the Deployment Manager to take appropriate actions and pay attention to security details a…Check if you run itEPSS 0.44%Apr 13, 2026
- Low2.7Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL Injection in the file /rsms/admin/services/view_service.php.Check if you run itEPSS 0.22%Apr 13, 2026
- Low2.7Sourcecodester Computer and Mobile Repair Shop Management System v1.0 is vulnerable to SQL injection in the file /rsms/admin/inquiries/view_details.php.Check if you run itEPSS 0.28%Apr 13, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD __build_packet_message()…Check if you run itEPSS 0.13%Apr 13, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp process_sdp() declare…Check if you run itEPSS 0.12%Apr 13, 2026
- High7.0In the Linux kernel, the following vulnerability has been resolved: ACPI: EC: clean up handlers on probe failure in acpi_ec_setup() When ec_install_handlers() returns…Check if you run itEPSS 0.14%Apr 13, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: rds: ib: reject FRMR registration before IB connection is established rds_ib_get_mr() extracts the…Check if you run itEPSS 0.11%Apr 13, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP Weiming Shi…Check if you run itEPSS 0.12%Apr 13, 2026
Sort