Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.1Cookie Request Header Injection via Unvalidated Encoder in cow_cookie:cookie/1Check if you run itEPSS 0.21%May 11, 2026
- High8.8OWASP BLT is a QA testing and vulnerability disclosure platform that encompasses websites, apps, git repositories, and more.Check if you run itEPSS 0.46%May 11, 2026
- High7.6Clerk JavaScript is the official JavaScript repository for Clerk authentication.Check if you run itEPSS 0.43%May 11, 2026
- Low2.1A weakness has been identified in Open5GS up to 2.7.7.Check if you run itEPSS 0.69%May 11, 2026
- High7.1Local file inclusion (LFI) and server-side request forgery (SSRF) vulnerabilities in pgAdmin 4 LLM API configuration endpoints.Check if you run itEPSS 0.35%May 11, 2026
- Critical9.4Authorization vulnerability in pgAdmin 4 server mode affecting Server Groups, Servers, Shared Servers, Background Processes, and Debugger modules.Check if you run itEPSS 0.65%May 11, 2026
- Critical9.4Grav is a file-based Web platform.Check if you run itEPSS 0.56%May 11, 2026
- High8.1Grav is a file-based Web platform.Check if you run itEPSS 0.58%May 11, 2026
- High8.8Grav is a file-based Web platform.Patch nowKEVEPSS 0.52%May 11, 2026
- Low2.1A vulnerability was determined in Open5GS up to 2.7.7.Check if you run itEPSS 0.69%May 11, 2026
- High8.6The Magic Link authentication flow accepts multiple invalid authentication requests without adequate rate limiting or resource control, leading to uncontrolled memory usage growth.Check if you run itEPSS 0.32%May 11, 2026
- High7.5In Webhook API invocations, the component accepts user-supplied input for HTTP request headers without sufficient validation or sanitization, allowing these headers to…Check if you run itEPSS 0.19%May 11, 2026
- Unknowngetflightpath flightpath Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 62.57%May 11, 2026
- Medium5.1uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the backend/mailingLog/manage module.Check if you run itEPSS 0.25%May 10, 2026
- Medium5.1uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the auctions/manage module.Check if you run itEPSS 0.25%May 10, 2026
- Medium5.1uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the tickets/manage module.Check if you run itEPSS 0.25%May 10, 2026
- Medium5.1uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the news/manage module.Check if you run itEPSS 0.25%May 10, 2026
- Medium5.1uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the posts/manage module.Check if you run itEPSS 0.25%May 10, 2026
- Medium5.1uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the auctions/myAuctions/status/loose module.Check if you run itEPSS 0.25%May 10, 2026
- Medium5.1uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the auctions/myAuctions/status/active module.Check if you run itEPSS 0.25%May 10, 2026
- Medium5.1uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the orders/myOrders module.Check if you run itEPSS 0.25%May 10, 2026
- Medium5.3WordPress Plugin Curtain 1.0.2 contains a cross-site request forgery vulnerability that allows attackers to activate or deactivate site maintenance mode by crafting ma…Check if you run itEPSS 0.13%May 10, 2026
- Medium5.3OpenCart 3.0.3.7 contains a cross-site request forgery vulnerability that allows attackers to change user passwords by sending crafted requests to the account/password endpoint.Check if you run itEPSS 0.13%May 10, 2026
- Medium5.1Advanced Guestbook 2.4.4 contains a persistent cross-site scripting vulnerability in the smilies administration interface that allows authenticated attackers to inject…Check if you run itEPSS 0.19%May 10, 2026
- High8.7CyberPanel 2.1 contains a command execution vulnerability that allows authenticated attackers to read arbitrary files and execute remote code by exploiting symlink att…Check if you run itEPSS 0.53%May 10, 2026