Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8owntone-server 2ca10d9 is vulnerable to Buffer Overflow due to lack of recursive checking.Check if you run itEPSS 0.34%Apr 10, 2026
- High7.5NASM’s disasm() function contains a stack based buffer overflow when formatting disassembly output, allowing an attacker triggered out-of-bounds write when exceeds the…Check if you run itEPSS 0.44%Apr 10, 2026
- Critical9.6NASM contains a heap use after free vulnerability in response file (-@) processing where a dangling pointer to freed memory is stored in the global depend_file and lat…Check if you run itEPSS 0.43%Apr 10, 2026
- Medium5.5A heap buffer overflow vulnerability exists in the Netwide Assembler (NASM) due to a lack of bounds checking in the obj_directive() function.Check if you run itEPSS 0.36%Apr 10, 2026
- High8.8LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/test_custom_code URI.Patch nowKEVEPSS 15.53%Apr 10, 2026
- High7.8Local privilege escalation due to improper handling of environment variables.Check if you run itEPSS 0.18%Apr 10, 2026
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Case Themes Case Theme User case-theme-user al…Check if you run itEPSS 0.49%Apr 10, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Zootemplate Cerato cerato allows Reflected XSS.This issue affects…Check if you run itEPSS 0.20%Apr 10, 2026
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CactusThemes VideoPro videopro allows PHP Loca…Check if you run itEPSS 0.47%Apr 10, 2026
- Medium6.0Improper synchronization of the userTokens map in the API server in Canonical Juju 4.0.5, 3.6.20, and 2.9.56 may allow an authenticated user to possibly cause a denial…Check if you run itEPSS 0.24%Apr 10, 2026
- Medium6.5In Juju versions prior to 2.9.57 and 3.6.21, an authorization issue exists in the Controller facade.Check if you run itEPSS 0.45%Apr 10, 2026
- High8.7This vulnerability exists in the Atom 3x Projector due to improper exposure of the Android Debug Bridge (ADB) service over the local network without authentication or…Check if you run itEPSS 0.26%Apr 10, 2026
- High7.5Denial of Service via Out of Memory vulnerability in Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ.Check if you run itEPSS 0.90%Apr 10, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_mass_storage: Fix potential integer overflow in check_command_size_in_blocks() The f…Check if you run itEPSS 0.17%Apr 10, 2026
- Critical9.8FalkorDB Browser 1.9.3 contains an unauthenticated path traversal vulnerability in the file upload API that allows remote attackers to write arbitrary files and achiev…Check if you run itEPSS 0.93%Apr 10, 2026
- High7.1The Gravity SMTP plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 2.1.4.Check if you run itEPSS 0.25%Apr 10, 2026
- High8.1A plaintext storage of a password vulnerability in Synology SSL VPN Client before 1.4.5-0684 allows remote attackers to access or influence the user's PIN code due to…Check if you run itEPSS 0.32%Apr 10, 2026
- Medium6.5A files or directories accessible to external parties vulnerability in Synology SSL VPN Client before 1.4.5-0684 allows remote attackers to access files within the ins…Check if you run itEPSS 0.19%Apr 10, 2026
- Medium4.8A security flaw has been discovered in musl libc up to 1.2.6.Check if you run itEPSS 0.24%Apr 10, 2026
- Medium5.5A vulnerability was identified in code-projects Vehicle Showroom Management System 1.0.Check if you run itEPSS 0.26%Apr 10, 2026
- Medium5.5A vulnerability was determined in code-projects Vehicle Showroom Management System 1.0.Check if you run itEPSS 0.26%Apr 10, 2026
- Medium5.5A vulnerability was found in code-projects Vehicle Showroom Management System 1.0.Check if you run itEPSS 0.33%Apr 10, 2026
- Medium5.3Livestatus injection in the prediction graph page in Checkmk <2.5.0b4, <2.4.0p26, and <2.3.0p47 allows an authenticated user to inject arbitrary Livestatus commands vi…Check if you run itEPSS 0.18%Apr 10, 2026
- Medium5.1Livestatus injection in the notification test mode in Checkmk <2.5.0b4 and <2.4.0p26 allows an authenticated user with access to the notification test page to inject a…Check if you run itEPSS 0.20%Apr 10, 2026
- Medium5.3Livestatus injection in the monitoring quicksearch in Checkmk <2.5.0b4 allows an authenticated attacker to inject livestatus commands via the search query due to insuf…Check if you run itEPSS 0.18%Apr 10, 2026
Sort