Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8WordPress Car Park Booking Plugin version 13 October 17 contains a time-based SQL injection vulnerability that allows unauthenticated attackers to manipulate database…Check if you run itEPSS 0.26%Jun 9, 2026
- Critical9.1Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C, Cortex…Check if you run itEPSS 0.54%Jun 9, 2026
- Critical9.8Fortinet FortiSandbox OS Command Injection VulnerabilityPatch nowKEVEPSS 76.11%Jun 9, 2026
- Critical10.0Ivanti Sentry OS Command Injection VulnerabilityPatch nowKEVEPSS 99.92%Jun 9, 2026
- High8.8A remote, unauthenticated BLE peer can trigger a 2-byte out-of-bounds write in the Bluetooth host during L2CAP LE CoC SDU reassembly.Check if you run itEPSS 0.45%Jun 9, 2026
- Medium5.1CVE-2025-62858 is listed by A buffer overflow vulnerability has been reported to affect several QNAP operating system versions..Check if you run itEPSS 0.45%Jun 9, 2026
- Critical9.8A remote, unauthenticated attacker can trigger memory corruption in Zephyr's HTTP server WebSocket upgrade path by sending a crafted Sec-WebSocket-Key header.Check if you run itEPSS 0.64%Jun 9, 2026
- Medium6.3A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions.Check if you run itEPSS 0.19%Jun 9, 2026
- Critical9.8In an untrusted JMS environment, org.springframework.jms.support.converter.MappingJackson2MessageConverter and org.springframework.jms.support.converter.JacksonJsonMes…Check if you run itEPSS 0.33%Jun 9, 2026
- Medium6.5Due to incorrect host parsing, applications that rely on UriComponentsBuilder to parse and validate an externally provided URL string may be exposed to a server-side r…Check if you run itEPSS 0.12%Jun 9, 2026
- Medium5.3Spring MVC and WebFlux applications are vulnerable to Multipart request smuggling attacks.Check if you run itEPSS 0.19%Jun 9, 2026
- Medium5.3A vulnerability in Spring Expression Language (SpEL) evaluation logic allows for arbitrary zero-argument method invocation, even within restricted or read-only context…Check if you run itEPSS 0.18%Jun 9, 2026
- High7.5Applications which accept user-supplied Spring Expression Language (SpEL) expressions may be vulnerable to a Denial of Service (DoS) attack if the evaluation of a SpEL…Check if you run itEPSS 0.39%Jun 9, 2026
- High7.5Applications that evaluate user-supplied Spring Expression Language (SpEL) expressions are vulnerable to an Algorithmic Denial of Service (DoS).Check if you run itEPSS 0.39%Jun 9, 2026
- High7.5An integer overflow vulnerability exists in the evaluation logic of the Spring Expression Language (SpEL).Check if you run itEPSS 0.26%Jun 9, 2026
- High7.5Applications may be vulnerable to a Regular Expression Denial of Service (ReDoS) attack if an attacker is able to provide a pattern which is then directly or indirectl…Check if you run itEPSS 0.34%Jun 9, 2026
- Medium5.3Spring WebFlux applications may be vulnerable to a security bypass when using the Kotlin Router DSL.Check if you run itEPSS 0.17%Jun 9, 2026
- Medium6.1Spring MVC applications which accept user-supplied values in the cssClass, cssErrorClass, or cssStyle attributes of JSP form tags allow arbitrary HTML/JavaScript code…Check if you run itEPSS 0.15%Jun 9, 2026
- Medium6.1Due to incorrect escaping, the use of JavaScriptUtils.javaScriptEscape() may lead to JavaScript code injection in the browser, potentially resulting in a cross-site sc…Check if you run itEPSS 0.16%Jun 9, 2026
- Medium6.1A Spring MVC or Spring WebFlux application which configures a mapping for "/**" where the view name is not explicitly specified allows an attacker to craft a link resu…Check if you run itEPSS 0.14%Jun 9, 2026
- Medium5.9Spring MVC and WebFlux applications are vulnerable to Path Traversal attacks when resolving static resources.Check if you run itEPSS 0.37%Jun 9, 2026
- High7.5Spring MVC and WebFlux applications are vulnerable to Denial of Service (DoS) attacks when resolving static resources.Check if you run itEPSS 0.40%Jun 9, 2026
- Medium5.9Spring MVC and WebFlux applications are vulnerable to Information Disclosure attacks when resolving static resources.Check if you run itEPSS 0.34%Jun 9, 2026
- Medium5.9Spring WebFlux applications are vulnerable to Denial of Service (DoS) attacks when processing multipart requests.Check if you run itEPSS 0.27%Jun 9, 2026
- Medium4.2A WebFlux application with a compromised subdomain (for example, compromised via cross-site scripting (XSS)) is vulnerable to an escalation attack exchanging a known s…Check if you run itEPSS 0.21%Jun 9, 2026
Sort