Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1In OCaml through 4.14.3, Bigarray.reshape allows an integer overflow, and resultant reading of arbitrary memory, when untrusted data is processed.Check if you run itEPSS 0.12%Mar 27, 2026
- Medium5.1WordPress Plugin "OpenStreetMap" provided by MiKa contains a cross-site scripting vulnerability.Check if you run itEPSS 0.17%Mar 27, 2026
- Medium6.9Missing authentication for critical function vulnerability in BUFFALO Wi-Fi router products may allow an attacker to forcibly reboot the product without authentication.Check if you run itEPSS 0.39%Mar 27, 2026
- High8.6Hidden functionality issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to gain access to the product’s debugging functionality, resulting in t…Check if you run itEPSS 0.38%Mar 27, 2026
- High8.7Authentication bypass issue exists in BUFFALO Wi-Fi router products, which may allow an attacker to alter critical configuration settings without authentication.Check if you run itEPSS 0.37%Mar 27, 2026
- High8.7Code injection vulnerability exists in BUFFALO Wi-Fi router products.Check if you run itEPSS 0.27%Mar 27, 2026
- High8.6OS Command Injection vulnerability exists in BUFFALO Wi-Fi router products.Check if you run itEPSS 0.94%Mar 27, 2026
- High7.5In RedisFilterExpressionConverter of spring-ai-redis-store, when a user-controlled string is passed as a filter value for a TAG field, stringValue() inserts the value…Check if you run itEPSS 0.26%Mar 27, 2026
- High7.5Spring AI's spring-ai-neo4j-store contains a Cypher injection vulnerability in Neo4jVectorFilterExpressionConverter.Check if you run itEPSS 0.26%Mar 27, 2026
- High8.6Spring AI's spring-ai-bedrock-converse contains a Server-Side Request Forgery (SSRF) vulnerability in BedrockProxyChatModel when processing multimodal messages that in…Check if you run itEPSS 0.36%Mar 27, 2026
- Critical9.8In Spring AI, a SpEL injection vulnerability exists in SimpleVectorStore when a user-supplied value is used as a filter expression key.Check if you run itEPSS 1.11%Mar 27, 2026
- Medium6.5Use after free vulnerability in Softing smartLink HW-DP or smartLink HW-PN webserver allows HTTP DoS.Check if you run itEPSS 0.21%Mar 27, 2026
- Medium5.5A security vulnerability has been detected in Shenzhen Ruiming Technology Streamax Crocus up to 1.3.44.Check if you run itEPSS 0.26%Mar 27, 2026
- Medium6.5The Smart Slider 3 plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 3.5.1.33 via the 'actionExportAll' function.Check if you run itEPSS 0.49%Mar 27, 2026
- Low1.9A weakness has been identified in code-projects Exam Form Submission 1.0.Check if you run itEPSS 0.29%Mar 27, 2026
- Medium5.5A security flaw has been discovered in code-projects Simple Laundry System 1.0.Check if you run itEPSS 0.40%Mar 27, 2026
- Low2.1A vulnerability was identified in Page-Replica Page Replica up to e4a7f52e75093ee318b4d5a9a9db6751050d2ad0.Check if you run itEPSS 0.21%Mar 27, 2026
- High7.4A vulnerability was determined in Tenda AC5 15.03.06.47.Check if you run itEPSS 2.65%Mar 27, 2026
- High7.7MyTube is a self-hosted downloader and player for several video websites Prior to version 1.8.72, an unauthenticated attacker can lock out administrator and visitor ac…Check if you run itEPSS 0.56%Mar 27, 2026
- High8.9MyTube is a self-hosted downloader and player for several video websites Prior to version 1.8.71, an unauthenticated attacker can register an arbitrary passkey and sub…Check if you run itEPSS 0.50%Mar 27, 2026
- Critical9.8BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner.Check if you run itEPSS 0.51%Mar 27, 2026
- High7.4cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.Check if you run itEPSS 0.27%Mar 27, 2026
- High7.8BentoML is a Python library for building online serving systems optimized for AI apps and model inference.Check if you run itEPSS 0.26%Mar 27, 2026
- High7.4MyTube is a self-hosted downloader and player for several video websites Prior to version 1.8.69, an authorization bypass in the endpoint allows attackers with low-pri…Check if you run itEPSS 0.40%Mar 27, 2026
- Medium6.5Open Source Point of Sale (opensourcepos) is a web based point of sale application written in PHP using CodeIgniter framework.Check if you run itEPSS 0.29%Mar 27, 2026
Sort