Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to the lack of proper input validation.Check if you run itEPSS 0.31%Apr 1, 2026
- High8.4An arbitrary file overwrite vulnerability in Docudepot PDF Reader: PDF Viewer APP v1.0.34 allows attackers to overwrite critical internal files via the file import pro…Check if you run itEPSS 0.15%Apr 1, 2026
- High8.4An arbitrary file overwrite vulnerability in Ora Tools PDF Reader ' Reader & Editor APPv4.3.5 allows attackers to overwrite critical internal files via the file import…Check if you run itEPSS 0.15%Apr 1, 2026
- Medium5.4Multiple stored cross-site scripting (XSS) vulnerabilities in the submit_add_user.asp endpoint of DDSN Interactive Acora CMS v10.7.1 allow attackers to execute arbitra…Check if you run itEPSS 0.17%Apr 1, 2026
- Medium6.4The King Addons for Elementor plugin for WordPress is vulnerable to multiple Contributor+ DOM-Based Stored Cross-Site Scripting vulnerabilities in all versions up to,…Check if you run itEPSS 0.25%Apr 1, 2026
- Medium5.6pymanager included the current working directory in sys.path meaning modules could be shadowed by modules in the current working directory.Check if you run itEPSS 0.18%Apr 1, 2026
- High7.3A reflected cross-site scripting (XSS) vulnerability in the dashboard search functionality of the VertiGIS FM solution allows attackers to craft a malicious URL, that…Check if you run itEPSS 0.19%Apr 1, 2026
- Medium5.5A flaw was found in libinput.Check if you run itEPSS 0.15%Apr 1, 2026
- High8.8A flaw was found in libinput.Check if you run itEPSS 0.18%Apr 1, 2026
- High7.5A flaw was found in Corosync.Check if you run itEPSS 1.01%Apr 1, 2026
- High8.2A flaw was found in Corosync.Check if you run itEPSS 0.88%Apr 1, 2026
- Medium6.9OpenViking versions 0.2.5 prior to 0.2.14 contain a missing authentication vulnerability in the bot proxy router that allows remote unauthenticated attackers to access…Check if you run itEPSS 0.43%Apr 1, 2026
- High8.6ByteDance DeerFlow versions prior to commit 92c7a20 contain a sandbox escape vulnerability in bash tool handling that allows attackers to execute arbitrary commands on…Check if you run itEPSS 0.41%Apr 1, 2026
- Medium6.5A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to improper server-side validation.Check if you run itEPSS 0.27%Apr 1, 2026
- High8.4An arbitrary file overwrite vulnerability in Tinybeans Private Family Album App v5.9.5-prod allows attackers to overwrite critical internal files via the file import p…Check if you run itEPSS 0.21%Apr 1, 2026
- High8.4An arbitrary file overwrite vulnerability in Deep Thought Industries ACE Scanner PDF Scanner v1.4.5 allows attackers to overwrite critical internal files via the file…Check if you run itEPSS 0.18%Apr 1, 2026
- High7.4A local file inclusion vulnerability in the upload/download flow of the VertiGIS FM application allows authenticated attackers to read arbitrary files from the server…Check if you run itEPSS 0.62%Apr 1, 2026
- Critical9.3metinfo metinfo Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 39.49%Apr 1, 2026
- High7.3Dell AppSync, version(s) 4.6.0, contain(s) an Incorrect Permission Assignment for Critical Resource vulnerability.Check if you run itEPSS 0.13%Apr 1, 2026
- High7.3Dell AppSync, version(s) 4.6.0, contain(s) an UNIX Symbolic Link (Symlink) Following vulnerability.Check if you run itEPSS 0.17%Apr 1, 2026
- Medium6.7A vulnerability was identified in MEPIS RM, an industrial software product developed by Metronik.Check if you run itEPSS 0.16%Apr 1, 2026
- Medium5.3Insufficient permission validation on multiple REST API Quick Setup endpoints in Checkmk 2.5.0 (beta) before version 2.5.0b2 and 2.4.0 before version 2.4.0p25 allows l…Check if you run itEPSS 0.24%Apr 1, 2026
- Medium6.9Blind server-side request forgery (SSRF) vulnerability in legacy connection methods of document co-authoring features in M-Files Server before 26.3 allow an unauthenti…Check if you run itEPSS 0.20%Apr 1, 2026
- High8.6An improper access check allows unauthorized access to webservice endpoints.Check if you run itEPSS 0.41%Apr 1, 2026
- High8.6Lack of input validation leads to an arbitrary file deletion vulnerability in the autoupdate server mechanism.Check if you run itEPSS 0.46%Apr 1, 2026
Sort