Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.0Route Services can be leveraged to send app traffic to network destinations outside of an app's configured egress rules.Check if you run itEPSS 0.20%May 1, 2026
- Low2.1A vulnerability was determined in OWAP DefectDojo up to 2.55.4.Check if you run itEPSS 0.28%Apr 30, 2026
- Low2.1A vulnerability was found in Bootstrap CMS 0.9.0-alpha.Check if you run itEPSS 0.23%Apr 30, 2026
- Medium5.5A vulnerability has been found in SourceCodester Hotel Management System 1.0.Check if you run itEPSS 0.26%Apr 30, 2026
- Medium5.5A flaw has been found in nextlevelbuilder GoClaw and GoClaw Lite up to 3.8.5.Check if you run itEPSS 0.38%Apr 30, 2026
- Medium6.5Users who connect to malicious registries with hostnames matching the bypass patterns will have their registry credentials exposed in plaintext.Check if you run itEPSS 0.20%Apr 30, 2026
- High8.7HKUDS OpenHarness contains a remote code execution vulnerability in the /bridge slash command that allows remote senders accepted by configuration to execute arbitrary…Check if you run itEPSS 0.65%Apr 30, 2026
- High7.4A vulnerability was detected in code-projects for Plugin 4.1.2cu.5137.Check if you run itEPSS 0.45%Apr 30, 2026
- Low2.1A security vulnerability has been detected in LinkStackOrg LinkStack up to 4.8.6.Check if you run itEPSS 0.26%Apr 30, 2026
- High8.8IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow allows an attacker to execute arbitrary commands with the privileges of the process running Langflow.Check if you run itEPSS 0.47%Apr 30, 2026
- High8.1IBM Langflow OSS 1.0.0 through 1.8.4 could allow any user to supply a flow_id to read transaction logs and vertex build data belonging to other users, and to delete pe…Check if you run itEPSS 0.20%Apr 30, 2026
- High7.8IBM Turbonomic prometurbo agent 8.16.0 through 8.17.6 IBM Turbonomic Application Resource Management grants excessive cluster‑wide permissions, including unrestricted…Check if you run itEPSS 0.13%Apr 30, 2026
- Critical9.1In Exim before 4.99.2, when the SPA authentication driver is used with an adversarial SPA resource, there can be an out-of-bounds write that crashes the connection ins…Check if you run itEPSS 0.37%Apr 30, 2026
- Medium5.3In Exim before 4.99.2, when utf8 operators are enabled, there is an out-of-bounds read if large UTF-8 trailing characters are present (malformed UTF-8 header data).Check if you run itEPSS 0.25%Apr 30, 2026
- Critical9.8In Exim before 4.99.2, when JSON lookup is enabled, an out-of-bounds heap write can occur when a JSON operator encounters malformed JSON in an untrusted header, becaus…Check if you run itEPSS 0.32%Apr 30, 2026
- High7.5In Exim before 4.99.2, on systems using musl libc (not glibc), an attacker can crash the connection instance when malformed DNS data is present in PTR records.Check if you run itEPSS 0.36%Apr 30, 2026
- Medium6.5IBM Langflow Desktop <=1.8.4 Langflow could allow a remote attacker to traverse directories on the system.Check if you run itEPSS 0.37%Apr 30, 2026
- Critical9.8IBM i 7.6, 7.5, 7.4, 7.3, and 7.2 s vulnerable to privilege escalation caused by an invalid IBM i Web Administration GUI authorization check.Check if you run itEPSS 0.20%Apr 30, 2026
- Medium6.5IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow an authenticated user to cause a denial…Check if you run itEPSS 0.34%Apr 30, 2026
- Medium5.5IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.3.0, 5.3.1 stores user credentials in plain text which can be read by a local user.Check if you run itEPSS 0.09%Apr 30, 2026
- High7.5IBM watsonx.data 2.2 through 2.3 IBM Lakehouse does not properly restrict communication between pods which could allow an attacker to transfer data between pods withou…Check if you run itEPSS 0.19%Apr 30, 2026
- Medium6.5IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow an authenticated user to cause a denial…Check if you run itEPSS 0.24%Apr 30, 2026
- Medium5.3IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow an authenticated user to cause a denial…Check if you run itEPSS 0.22%Apr 30, 2026
- Low2.0A weakness has been identified in LinkStackOrg LinkStack up to 4.8.6.Check if you run itEPSS 0.25%Apr 30, 2026
- High8.6SSCMS v7.4.0 contains a SQL injection vulnerability in the stl:sqlContent tag where the queryString attribute is passed directly to database execution without paramete…Check if you run itEPSS 0.53%Apr 30, 2026
Sort