Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.0A user with access to the cluster with a limited set of privilege actions can trigger a crash of a mongod process during the limited and unpredictable window when the…Check if you run itEPSS 0.21%Mar 30, 2026
- Medium6.3A weakness has been identified in osrg GoBGP up to 4.3.0.Check if you run itEPSS 0.43%Mar 30, 2026
- High7.1Unauthenticated credential disclosure in the wizard interface in ZTE ZXHN H188A V6.0.10P2_TE and V6.0.10P3N3_TE allows unauthenticated attackers on the local network t…Check if you run itEPSS 8.95%Mar 30, 2026
- High7.4SQL Injection vulnerability in SchemaHero 0.23.0 via the column parameter to the mysqlColumnAsInsert function in file plugins/mysql/lib/column.go.Check if you run itEPSS 0.20%Mar 30, 2026
- Critical9.3A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.33%Mar 30, 2026
- Medium6.1A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.26%Mar 30, 2026
- Medium6.1A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.26%Mar 30, 2026
- Medium6.1A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.28%Mar 30, 2026
- Medium6.1A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.26%Mar 30, 2026
- Medium6.1A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.26%Mar 30, 2026
- Medium6.1A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.26%Mar 30, 2026
- Critical9.8CrewAI does not properly check that Docker is still running during runtime, and will fall back to a sandbox setting that allows for RCE exploitation.Check if you run itEPSS 0.76%Mar 30, 2026
- Critical9.8CrewAI contains a server-side request forgery vulnerability that enables content acquisition from internal and cloud services, facilitated by the RAG search tools not…Check if you run itEPSS 0.51%Mar 30, 2026
- High7.5CrewAI contains a arbitrary local file read vulnerability in the JSON loader tool that reads files without path validation, enabling access to files on the server.Check if you run itEPSS 0.63%Mar 30, 2026
- Critical9.6The CrewAI CodeInterpreter tool falls back to SandboxPython when it cannot reach Docker, which can enable RCE through arbitrary C function calling.Check if you run itEPSS 0.46%Mar 30, 2026
- High7.4SQL Injection vulnerability in SchemaHero 0.23.0 via the column parameter to the columnAsInsert function in file plugins/postgres/lib/column.go.Check if you run itEPSS 0.20%Mar 30, 2026
- Medium6.5DDSN Interactive cm3 Acora CMS version 10.7.1 contains an improper access control vulnerability.Check if you run itEPSS 0.31%Mar 30, 2026
- Medium6.5A flaw in Node.js URL processing causes an assertion failure in native code when is called with a malformed internationalized domain name (IDN) containing invalid char…Check if you run itEPSS 0.33%Mar 30, 2026
- High7.8A flaw was found in virtio-win, specifically within the VirtIO Block (BLK) device.Check if you run itEPSS 0.11%Mar 30, 2026
- Medium5.5A flaw was found in virtio-win.Check if you run itEPSS 0.11%Mar 30, 2026
- Medium6.3A security flaw has been discovered in osrg GoBGP up to 4.3.0.Check if you run itEPSS 0.30%Mar 30, 2026
- High8.8An issue was discovered in Zimbra Collaboration (ZCS) 10.0 and 10.1.Check if you run itEPSS 0.21%Mar 30, 2026
- Medium6.1A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.21%Mar 30, 2026
- Medium6.1A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.21%Mar 30, 2026
- Medium6.1A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.21%Mar 30, 2026
Sort