Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7PraisonAI before 4.6.78 Prompt Injection Defense BypassCheck if you run itEPSS 0.34%Jul 11, 2026
- Medium6.9PraisonAI AgentMail before 4.6.78 Message Injection via WebhookCheck if you run itEPSS 0.31%Jul 11, 2026
- High8.8PraisonAI before 1.7.3 Unauthenticated Agent Access via Insecure DefaultsCheck if you run itEPSS 0.40%Jul 11, 2026
- Medium6.8PraisonAI before 4.6.78 Path Traversal via Custom CommandsCheck if you run itEPSS 0.22%Jul 11, 2026
- Medium5.3Context Blog <= 1.3.5 - Unauthenticated Sensitive Information Exposure via 'postID' ParameterCheck if you run itEPSS 0.36%Jul 11, 2026
- Medium4.3PDF Invoices & Packing Slips for WooCommerce <= 5.14.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Disclosure via 'order_id' Shortcode AttributeCheck if you run itEPSS 0.44%Jul 11, 2026
- High8.8Improper Privilege ManagementPatch nowKEVEPSS 0.44%Jul 11, 2026
- Medium6.5jackson-databind: @JsonView bypassed for @JsonUnwrapped container properties on deserializationCheck if you run itEPSS 0.35%Jul 10, 2026
- Medium6.5on a Record property is bypassed with a PropertyNamingStrategy in jackson-databind [CVE-2026-59888]Check if you run itEPSS 0.42%Jul 10, 2026
- Medium6.5GHSA-mhm7-754m-9p8w is listed by bypass for creator properties with.Open the advisoryJul 10, 2026
- Medium5.4Colorbox - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-069Check if you run itEPSS 0.23%Jul 10, 2026
- Medium5.4FlowDrop - Moderately critical - Access bypass - SA-CONTRIB-2026-068Check if you run itEPSS 0.23%Jul 10, 2026
- Medium5.4FlowDrop - Moderately critical - Access bypass - SA-CONTRIB-2026-067Check if you run itEPSS 0.23%Jul 10, 2026
- Medium6.9Nezha Monitoring: DDNS and Notification credential exposure via unredacted list APICheck if you run itEPSS 0.39%Jul 10, 2026
- Medium5.0RabbitMQ is a messaging and streaming broker.Check if you run itEPSS 0.41%Jul 10, 2026
- High7.5RabbitMQ is a messaging and streaming broker.Check if you run itEPSS 2.84%Jul 10, 2026
- Critical9.8Drupal AlternativeCommerce (Basket) - Highly critical - Arbitrary PHP code execution - SA-CONTRIB-2026-038Check if you run itEPSS 0.56%Jul 10, 2026
- High7.8GPU DDK - Page UAF read in PMMETA_PROTECT heap memoryCheck if you run itEPSS 0.18%Jul 10, 2026
- Critical9.6Prowler is a cloud security platform.Check if you run itEPSS 0.85%Jul 10, 2026
- Medium5.9GNU Wget versions < 1.25.0+4f85853f64 do not validate the IP address provided by an FTP PASV response while operating in FTP passive mode.Check if you run itEPSS 0.17%Jul 10, 2026
- High8.8IDOR in Teracity's TeraMISCheck if you run itEPSS 0.44%Jul 10, 2026
- Critical9.3MCP Server Kubernetes < 3.9.0 Argument Injection via kubectl Structured ToolsCheck if you run itEPSS 2.36%Jul 10, 2026
- High8.7Krayin CRM Insecure Direct Object Reference via ControllersCheck if you run itEPSS 0.51%Jul 10, 2026
- High8.7Dify < 1.16.0-rc1 SQL Injection via MyScale Vector Store search_by_full_textCheck if you run itEPSS 0.50%Jul 10, 2026
- Critical9.6Prowler: SAML Domain Claiming Enables Cross-Tenant Account TakeoverCheck if you run itEPSS 0.53%Jul 10, 2026
Sort