Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.9Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Check if you run itEPSS 0.32%Apr 21, 2026
- Medium4.9Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Check if you run itEPSS 0.32%Apr 21, 2026
- Medium6.0Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).Check if you run itEPSS 0.10%Apr 21, 2026
- Medium4.9Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Check if you run itEPSS 0.32%Apr 21, 2026
- Low2.7Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema).Check if you run itEPSS 0.26%Apr 21, 2026
- Medium5.3Vulnerability in the XML Database component of Oracle Database Server.Check if you run itEPSS 0.24%Apr 21, 2026
- Medium4.9Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Check if you run itEPSS 0.32%Apr 21, 2026
- High8.5Vulnerability in the Oracle Life Sciences Empirica Signal product of Oracle Life Science Applications (component: Common Core).Check if you run itEPSS 0.20%Apr 21, 2026
- Medium5.3The LatePoint plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.3.2.Check if you run itEPSS 0.64%Apr 17, 2026
- High8.2maddy is a composable, all-in-one mail server.Check if you run itEPSS 0.52%Apr 16, 2026
- Medium6.3A padding oracle exists in wolfSSL's PKCS7 CBC decryption that could allow an attacker to recover plaintext through repeated decryption queries with modified ciphertext.Check if you run itEPSS 0.15%Apr 9, 2026
- High7.5Padding Oracle vulnerability in Apache Tomcat's EncryptInterceptor with default configuration.Check if you run itEPSS 2.89%Apr 9, 2026
- High8.5n8n-MCP is a Model Context Protocol (MCP) server that provides AI assistants with comprehensive access to n8n node documentation, properties, and operations.Check if you run itEPSS 0.43%Apr 9, 2026
- High7.7pyLoad is a free and open-source download manager written in Python.Check if you run itEPSS 0.36%Apr 6, 2026
- Medium5.3Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.43%Mar 31, 2026
- Medium5.9A flaw in Node.js HMAC verification uses a non-constant-time comparison when validating user-provided signatures, potentially leaking timing information proportional t…Check if you run itEPSS 0.39%Mar 30, 2026
- Medium6.9Navicat for Oracle 12.1.15 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in t…Check if you run itEPSS 0.19%Mar 30, 2026
- Medium5.9Doveadm credentials are verified using direct comparison which is susceptible to timing oracle attack.Check if you run itEPSS 0.43%Mar 27, 2026
- Medium6.3Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.41%Mar 24, 2026
- High7.5WWBN AVideo is an open source video platform.Check if you run itEPSS 0.56%Mar 22, 2026
- High8.2phpseclib is a PHP secure communications library.Check if you run itEPSS 0.44%Mar 20, 2026
- Critical9.8Oracle identity_manager Missing Authentication for Critical FunctionPatch nowKEVEPSS 1.03%Mar 20, 2026
- Critical9.8Vulnerability in the Oracle Edge Cloud Infrastructure Designer and Visualisation Toolkit product of Oracle Open Source Projects (component: Desktop).Check if you run itEPSS 0.46%Mar 17, 2026
- High7.7Versions of the package sjcl before 1.0.9 are vulnerable to Improper Verification of Cryptographic Signature due to missing point-on-curve validation in sjcl.ecc.basic…Check if you run itEPSS 0.36%Mar 17, 2026
- Medium5.5A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names.Check if you run itEPSS 0.19%Mar 16, 2026