Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low3.7A flaw was found in gnutls.Check if you run itEPSS 0.54%Jun 1, 2026
- Low2.3The DeepAI endpoint 'https://api.deepai.org/change_user_email' accepts POST requests without any CSRF protection.Check if you run itEPSS 0.11%Jun 1, 2026
- Medium5.3Nanobot prior to version 0.2.1 contains a denial of service vulnerability in the Matrix channel media download handler that allows authenticated room members to exhaus…Check if you run itEPSS 0.27%Jun 1, 2026
- High7.0Nanobot prior to version 0.2.1 contains a server-side request forgery vulnerability in the Microsoft Teams channel handler that allows remote attackers to exfiltrate B…Check if you run itEPSS 0.38%Jun 1, 2026
- Medium5.3Nanobot prior to version 0.2.1 contains a server-side request forgery vulnerability in the web_fetch tool that allows remote attackers to reach internal or private net…Check if you run itEPSS 0.36%Jun 1, 2026
- High8.7Banana Slides through 0.4.0, patched in commit e8bc490, contains a path traversal vulnerability in the generate_image() function within the AI service backend that all…Check if you run itEPSS 0.42%Jun 1, 2026
- High7.2CodexBar prior to 0.32.0 contains an insecure temporary file handling vulnerability that allows local attackers to access sensitive credentials or tamper with build ar…Check if you run itEPSS 0.13%Jun 1, 2026
- High7.5CodexBar prior to 0.32.0 contains a privilege escalation vulnerability in the CLI installer that allows local attackers to execute arbitrary commands as root by exploi…Check if you run itEPSS 0.27%Jun 1, 2026
- High8.2FlexRIC v2.0.0 allows a single SCTP connection to bind multiple xapp_ids by sending multiple E42_SETUP_REQUESTs.Check if you run itEPSS 0.41%Jun 1, 2026
- High8.2Kiteworks is a private data network (PDN).Check if you run itEPSS 0.29%Jun 1, 2026
- Low2.1A security flaw has been discovered in code-projects Hotel and Tourism Reservation System 1.0.Check if you run itEPSS 0.34%Jun 1, 2026
- Medium5.5A vulnerability was identified in code-projects Hotel and Tourism Reservation System 1.0.Check if you run itEPSS 0.50%Jun 1, 2026
- Medium5.5A vulnerability was determined in SourceCodester SEO Meta Tag Extractor 1.0.Check if you run itEPSS 0.29%Jun 1, 2026
- Low2.1A vulnerability was found in CodeAstro Payroll System 1.0.Check if you run itEPSS 0.20%Jun 1, 2026
- Medium5.3A vulnerability has been found in DevaslanPHP project-management up to 2.0.0-beta1.Check if you run itEPSS 0.23%Jun 1, 2026
- Medium5.3A flaw has been found in DevaslanPHP project-management up to 2.0.0-beta1.Check if you run itEPSS 0.23%Jun 1, 2026
- High7.5A NULL pointer dereference in the ext4_dir_en_get_name_len function in include/ext4_dir.h of lwext4 1.0.0 allows attackers to cause a denial of service by supplying a…Check if you run itEPSS 0.38%Jun 1, 2026
- High7.1Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user space application to map sensitive SMN (System Ma…Check if you run itEPSS 0.10%Jun 1, 2026
- High8.8An Improper Access Control vulnerability in Ivanti Neurons for ITSM (cloud and on-premises) allows a remote authenticated attacker to gain administrative access.Check if you run itEPSS 1.44%Jun 1, 2026
- High8.5IBM WebSphere Application Server 9.0, and 8.5 is affected by an improper validation of user-supplied data during deserialization using the SAML Web Single Sign-On component.Check if you run itEPSS 0.52%Jun 1, 2026
- Critical9.0IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to potential remote code execution due to deserialization of untrusted data via JAX-WS endpoints with WS-Security.Check if you run itEPSS 0.46%Jun 1, 2026
- Critical9.0IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to remote code execution caused by the bypass of security controls.Check if you run itEPSS 0.51%Jun 1, 2026
- Critical9.1IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to identity spoofing.Check if you run itEPSS 0.33%Jun 1, 2026
- High8.8IBM i Access Family 1.1.5.0 through 1.1.9.12 IBM i Access Client Solutions (ACS) is vulnerable to remote code execution when configured to listen for requests from IBM i Navigator.Check if you run itEPSS 0.45%Jun 1, 2026
- Critical9.2AI Tensor Engine for ROCm (AITER) through 0.1.14 contains an unauthenticated remote code execution vulnerability in the MessageQueue.recv() function within shm_broadca…Check if you run itEPSS 1.10%Jun 1, 2026
Sort