Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Incorrect boundary conditions in the Graphics: Canvas2D component.Check if you run itEPSS 0.73%Mar 24, 2026
- High7.5Incorrect boundary conditions in the Graphics: Canvas2D component.Check if you run itEPSS 0.71%Mar 24, 2026
- High7.5Race condition, use-after-free in the Graphics: WebRender component.Check if you run itEPSS 0.37%Mar 24, 2026
- Critical9.1Langflow is a tool for building and deploying AI-powered agents and workflows.Check if you run itEPSS 3.15%Mar 24, 2026
- Critical9.9Langflow is a tool for building and deploying AI-powered agents and workflows.Patch nowKEVEPSS 13.47%Mar 24, 2026
- High7.3Exposure of session signing secret in Checkmk <2.4.0p23, <2.3.0p45 and 2.2.0 allows an administrator of a remote site with config sync enabled to hijack sessions on th…Check if you run itEPSS 0.35%Mar 24, 2026
- High8.7PhreeBooks ERP 5.2.3 contains a remote code execution vulnerability in the image manager that allows authenticated attackers to upload and execute arbitrary PHP files…Check if you run itEPSS 0.81%Mar 24, 2026
- Critical9.3Tabs Mail Carrier 2.5.1 contains a buffer overflow vulnerability in the MAIL FROM SMTP command that allows remote attackers to execute arbitrary code by sending a craf…Check if you run itEPSS 0.93%Mar 24, 2026
- Medium6.9WinAVI iPod/3GP/MP4/PSP Converter 4.4.2 contains a denial of service vulnerability that allows local attackers to crash the application by processing malformed AVI files.Check if you run itEPSS 0.18%Mar 24, 2026
- Medium6.9WinMPG Video Convert 9.3.5 and older versions contain a buffer overflow vulnerability in the registration dialog that allows local attackers to crash the application b…Check if you run itEPSS 0.24%Mar 24, 2026
- High8.8eNdonesia Portal v8.7 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code…Check if you run itEPSS 0.35%Mar 24, 2026
- High8.8Bootstrapy CMS contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code throug…Check if you run itEPSS 0.27%Mar 24, 2026
- High8.8Netartmedia Vlog System contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the…Check if you run itEPSS 0.27%Mar 24, 2026
- High8.8Inout Article Base CMS contains SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries through the 'p' and 'u' parameters.Check if you run itEPSS 0.34%Mar 24, 2026
- High8.8Matrimony Website Script M-Plus contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries by injecting SQL co…Check if you run itEPSS 0.34%Mar 24, 2026
- High7.1Meeplace Business Review Script contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious c…Check if you run itEPSS 0.30%Mar 24, 2026
- High8.6X-NetStat Pro 5.63 contains a local buffer overflow vulnerability that allows local attackers to execute arbitrary code by overwriting the EIP register through a 264-b…Check if you run itEPSS 0.19%Mar 24, 2026
- High8.8Zeeways Jobsite CMS contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'id'…Check if you run itEPSS 0.33%Mar 24, 2026
- High8.8Zeeways Matrimony CMS contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries through the profile_list endpoint.Check if you run itEPSS 0.33%Mar 24, 2026
- High8.6Base64 Decoder 1.1.2 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by triggering a structured exception ha…Check if you run itEPSS 0.27%Mar 24, 2026
- High8.6AIDA64 Extreme 5.99.4900 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying mali…Check if you run itEPSS 0.26%Mar 24, 2026
- Medium6.9phpFileManager 1.7.8 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the action, fm_current…Check if you run itEPSS 0.57%Mar 24, 2026
- High8.6AIDA64 Business 5.99.4900 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by overwriting S…Check if you run itEPSS 0.26%Mar 24, 2026
- High8.7PhreeBooks ERP 5.2.3 contains an arbitrary file upload vulnerability in the Image Manager component that allows authenticated attackers to upload malicious files by su…Check if you run itEPSS 0.91%Mar 24, 2026
- High8.6AIDA64 Extreme 5.99.4900 contains a structured exception handler buffer overflow vulnerability in the logging functionality that allows local attackers to execute arbi…Check if you run itEPSS 0.22%Mar 24, 2026
Sort