Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.3CVE-2026-33449 is a buffer overflow in a message handling function of the Secure Access client prior to 14.50.Check if you run itEPSS 0.24%Apr 30, 2026
- Medium6.0FRRouting before 10.5.3 contains an integer overflow vulnerability in seven OSPF Traffic Engineering and Segment Routing TLV parser functions where a uint16_t accumula…Check if you run itEPSS 0.22%Apr 30, 2026
- Low2.1SSCMS v7.4.0 contains a reflected cross-site scripting vulnerability in the STL processing endpoint that allows attackers to execute arbitrary JavaScript by crafting m…Check if you run itEPSS 0.20%Apr 30, 2026
- Medium4.8CVE-2026-33448 is a format string vulnerability in the logging subsystem of Secure Access client for MacOS prior to 14.50.Check if you run itEPSS 0.10%Apr 30, 2026
- Low2.3CVE-2026-33447 is a buffer overflow in a message parsing function of the Secure Access client prior to 14.50.Check if you run itEPSS 0.25%Apr 30, 2026
- Low2.3CVE-2026-33446 is a buffer overflow in the authentication sub-system of the Secure Access client prior to 14.50.Check if you run itEPSS 0.29%Apr 30, 2026
- High7.5Assertion failure vulnerability in the PCO (Protocol Configuration Options) parser in the SMF (Session Management Function) component of Open5GS before v2.7.5 allows r…Check if you run itEPSS 0.33%Apr 30, 2026
- High7.5An issue in open5gs v.2.7.3 allows a remote attacker to cause a denial of service via a crafted PDU Session Modification RequestCheck if you run itEPSS 0.31%Apr 30, 2026
- High7.5Improper neutralization of inputs used in an OS command in the FSx Windows File Server volume mounting component in Amazon ECS Agent on Windows before version 1.103.0…Check if you run itEPSS 0.55%Apr 30, 2026
- High8.1Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts.Check if you run itEPSS 0.24%Apr 30, 2026
- Medium6.5Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts.Check if you run itEPSS 0.24%Apr 30, 2026
- High7.5Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts.Check if you run itEPSS 0.33%Apr 30, 2026
- High8.1Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts.Check if you run itEPSS 0.23%Apr 30, 2026
- High7.5Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts.Check if you run itEPSS 0.27%Apr 30, 2026
- Medium6.5Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts.Check if you run itEPSS 0.24%Apr 30, 2026
- High8.9Insufficient Verification of Data Authenticity vulnerability in hexpm hex (Hex.RemoteConverger module) allows dependency integrity bypass via unverified lockfile checksums.Check if you run itEPSS 0.19%Apr 30, 2026
- High7.4A flaw was found in gnutls.Check if you run itEPSS 0.56%Apr 30, 2026
- Low3.7A flaw was found in gnutls.Check if you run itEPSS 0.80%Apr 30, 2026
- Medium5.4Multiple authenticated cross-site scripting (XSS) vulnerabilities in the XssHttpServletRequestWrapper class of shopizer v3.2.5 allows attackers to execute arbitrary we…Check if you run itEPSS 0.14%Apr 30, 2026
- High8.8An XML external entity (XXE) vulnerability in the /designer/loadReport endpoint of SpringBlade v4.8.0 allows authenticated attackers to execute arbitrary code via inje…Check if you run itEPSS 0.33%Apr 30, 2026
- Medium6.1A stored cross-site scripting (XSS) vulnerability in the /api/blade-desk/notice/submit endpoint of SpringBlade v4.8.0 allows attackers to execute arbitrary web scripts…Check if you run itEPSS 0.19%Apr 30, 2026
- High8.8An issue in the fileEntityId parameter in the /a/file/upload endpoint of JeeSite v5.15.1 allows authenticated attackers with file upload permissions to execute a path…Check if you run itEPSS 0.43%Apr 30, 2026
- Medium6.1A stored cross-site scripting (XSS) vulnerability in the /msg/msgInner/save endpoint of JeeSite v5.15.1 allows attackers to execute arbitrary web scripts or HTML via i…Check if you run itEPSS 0.15%Apr 30, 2026
- Critical9.1Gnutls: gnutls: denial of service via dtls zero-length fragmentCheck if you run itEPSS 2.07%Apr 30, 2026
- Critical10.0A path traversal vulnerability in the /content/images/add endpoint of shopizer v3.2.5 allows attackers write arbitrary files to any writeable path via a crafted POST request.Check if you run itEPSS 0.41%Apr 30, 2026
Sort