Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Apache Neethi does not properly detect circular references in policy definitions.Check if you run itEPSS 0.76%May 1, 2026
- High7.5Apache Neethi is vulnerable to a Denial of Service attack through algorithmic complexity in policy normalization.Check if you run itEPSS 0.71%May 1, 2026
- Medium5.4@diplodoc/search-extension 1.0.0 through 3.x before 3.0.3 allows stored XSS via the title in a .md file.Check if you run itEPSS 0.24%May 1, 2026
- High8.4The LabOne Q serialization framework uses a class-loading mechanism (import_cls) to dynamically import and instantiate Python classes during deserialization.Check if you run itEPSS 0.26%May 1, 2026
- Critical10.0JS8Call through 2.3.1 and JS8Call-improved before 3.0 have a stack-based buffer overflow via a radio transmission of @APRSIS GRID followed by a long Maidenhead locator.Check if you run itEPSS 0.57%May 1, 2026
- Medium5.5A vulnerability was identified in itsourcecode Electronic Judging System 1.0.Check if you run itEPSS 0.26%May 1, 2026
- Low2.9A vulnerability was determined in D-Link M60 up to 1.20B02.Check if you run itEPSS 1.10%May 1, 2026
- Medium6.4The Elementor Website Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the _elementor_data meta field in versions up to, and including, 4.0.4.Check if you run itEPSS 0.22%May 1, 2026
- Medium6.1Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanit…Check if you run itEPSS 0.28%May 1, 2026
- Low2.0A vulnerability was found in code-projects Gym Management System 1.0.Check if you run itEPSS 0.21%May 1, 2026
- Medium5.5A vulnerability has been found in SourceCodester Pharmacy Sales and Inventory System 1.0.Check if you run itEPSS 0.26%May 1, 2026
- Medium5.5A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0.Check if you run itEPSS 0.27%May 1, 2026
- High8.8Bitwarden CLI 2026.4.0 from 2026-04-22T21:57Z to 2026-04-22T23:30Z, when obtained from npm, had embedded malicious code.Check if you run itEPSS 0.31%May 1, 2026
- High7.4A vulnerability was detected in Totolink NR1800X 9.1.0u.6279_B20210910.Check if you run itEPSS 1.49%May 1, 2026
- High8.9A security vulnerability has been detected in Totolink NR1800X 9.1.0u.6279_B20210910.Check if you run itEPSS 0.75%May 1, 2026
- Medium5.5A weakness has been identified in SourceCodester Advanced School Management System 1.0.Check if you run itEPSS 0.26%May 1, 2026
- High8.9A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521.Check if you run itEPSS 1.82%May 1, 2026
- Medium5.5A vulnerability was determined in Open5GS up to 2.7.7.Check if you run itEPSS 0.38%May 1, 2026
- Low2.1A vulnerability was found in Open5GS up to 2.7.7.Check if you run itEPSS 0.30%May 1, 2026
- Medium5.5A vulnerability has been found in Fujian Apex LiveBOS up to 2.0.Check if you run itEPSS 0.42%May 1, 2026
- Low2.1A flaw has been found in Open5GS up to 2.7.7.Check if you run itEPSS 0.36%May 1, 2026
- High7.4A vulnerability has been found in UTT HiPER 1200GW up to 2.5.3-170306.Check if you run itEPSS 0.47%May 1, 2026
- High7.4A flaw has been found in UTT HiPER 1200GW up to 2.5.3-1703.Check if you run itEPSS 0.47%May 1, 2026
- High7.8Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code executionCheck if you run itEPSS 0.18%May 1, 2026
- High7.8RDP protocol dissector crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code executionCheck if you run itEPSS 0.16%May 1, 2026
Sort