Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.1A vulnerability was found in Open5GS up to 2.7.7.Check if you run itEPSS 0.30%May 1, 2026
- Medium5.5A vulnerability has been found in Fujian Apex LiveBOS up to 2.0.Check if you run itEPSS 0.42%May 1, 2026
- Low2.1A flaw has been found in Open5GS up to 2.7.7.Check if you run itEPSS 0.36%May 1, 2026
- High7.4A vulnerability has been found in UTT HiPER 1200GW up to 2.5.3-170306.Check if you run itEPSS 0.47%May 1, 2026
- High7.4A flaw has been found in UTT HiPER 1200GW up to 2.5.3-1703.Check if you run itEPSS 0.47%May 1, 2026
- High7.8Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code executionCheck if you run itEPSS 0.18%May 1, 2026
- High7.8RDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code executionCheck if you run itEPSS 0.16%May 1, 2026
- Medium5.5K12 RF5 file parser crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of serviceCheck if you run itEPSS 0.12%May 1, 2026
- High7.8SBC codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code executionCheck if you run itEPSS 0.16%May 1, 2026
- Medium5.0Route Services can be leveraged to send app traffic to network destinations outside of an app's configured egress rules.Check if you run itEPSS 0.20%May 1, 2026
- Low2.1A vulnerability was determined in OWAP DefectDojo up to 2.55.4.Check if you run itEPSS 0.28%Apr 30, 2026
- Low2.1A vulnerability was found in Bootstrap CMS 0.9.0-alpha.Check if you run itEPSS 0.23%Apr 30, 2026
- Medium5.5A vulnerability has been found in SourceCodester Hotel Management System 1.0.Check if you run itEPSS 0.26%Apr 30, 2026
- Medium5.5A flaw has been found in nextlevelbuilder GoClaw and GoClaw Lite up to 3.8.5.Check if you run itEPSS 0.38%Apr 30, 2026
- Medium6.5Users who connect to malicious registries with hostnames matching the bypass patterns will have their registry credentials exposed in plaintext.Check if you run itEPSS 0.20%Apr 30, 2026
- High8.7HKUDS OpenHarness contains a remote code execution vulnerability in the /bridge slash command that allows remote senders accepted by configuration to execute arbitrary…Check if you run itEPSS 0.65%Apr 30, 2026
- High7.4A vulnerability was detected in code-projects for Plugin 4.1.2cu.5137.Check if you run itEPSS 0.45%Apr 30, 2026
- Low2.1A security vulnerability has been detected in LinkStackOrg LinkStack up to 4.8.6.Check if you run itEPSS 0.26%Apr 30, 2026
- High8.8IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow allows an attacker to execute arbitrary commands with the privileges of the process running Langflow.Check if you run itEPSS 0.47%Apr 30, 2026
- High8.1IBM Langflow OSS 1.0.0 through 1.8.4 could allow any user to supply a flow_id to read transaction logs and vertex build data belonging to other users, and to delete pe…Check if you run itEPSS 0.20%Apr 30, 2026
- High7.8IBM Turbonomic prometurbo agent 8.16.0 through 8.17.6 IBM Turbonomic Application Resource Management grants excessive cluster‑wide permissions, including unrestricted…Check if you run itEPSS 0.13%Apr 30, 2026
- Critical9.1In Exim before 4.99.2, when the SPA authentication driver is used with an adversarial SPA resource, there can be an out-of-bounds write that crashes the connection ins…Check if you run itEPSS 0.37%Apr 30, 2026
- Medium5.3In Exim before 4.99.2, when utf8 operators are enabled, there is an out-of-bounds read if large UTF-8 trailing characters are present (malformed UTF-8 header data).Check if you run itEPSS 0.25%Apr 30, 2026
- Critical9.8In Exim before 4.99.2, when JSON lookup is enabled, an out-of-bounds heap write can occur when a JSON operator encounters malformed JSON in an untrusted header, becaus…Check if you run itEPSS 0.32%Apr 30, 2026
- High7.5In Exim before 4.99.2, on systems using musl libc (not glibc), an attacker can crash the connection instance when malformed DNS data is present in PTR records.Check if you run itEPSS 0.36%Apr 30, 2026
Sort