Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5The ARMember Premium plugin for WordPress is vulnerable to SQL Injection via the 'sSortDir_0' parameter of the AJAX action in all versions up to, and including, 7.3.1.Check if you run itEPSS 0.31%Jun 2, 2026
- High7.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.38%Jun 2, 2026
- Medium6.3Medplum before 5.1.14 contains a server-side request forgery vulnerability in the subscription worker that allows authenticated users to perform unauthorized internal…Check if you run itEPSS 0.23%Jun 2, 2026
- Medium5.9FastNetMon Community Edition through 1.2.9 contains an out-of-bounds read in the IPv4 packet parser.Check if you run itEPSS 0.27%Jun 2, 2026
- Low2.1Improper Encoding or Escaping of Output vulnerability in elixir-tesla tesla allows multipart part header injection via unescaped Content-Disposition parameter values.Check if you run itEPSS 0.27%Jun 2, 2026
- High8.2Allocation of Resources Without Limits or Throttling vulnerability in elixir-tesla tesla allows denial of service via atom table exhaustion in Tesla.Adapter.Mint.Check if you run itEPSS 0.35%Jun 2, 2026
- Low2.1Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') vulnerability in elixir-tesla tesla allows HTTP header injection via Tesl…Check if you run itEPSS 0.24%Jun 2, 2026
- High8.2Improper Handling of Case Sensitivity vulnerability in elixir-tesla tesla allows credential leakage to a third-party origin on cross-origin redirects.Check if you run itEPSS 0.49%Jun 2, 2026
- High8.2Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in elixir-tesla tesla allows a denial of service via decompression bomb in HTTP response bodies.Check if you run itEPSS 0.46%Jun 2, 2026
- Medium6.6AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.Check if you run itEPSS 0.15%Jun 2, 2026
- High7.5React Router is a router for React.Check if you run itEPSS 0.30%Jun 2, 2026
- High8.1React Router is a router for React.Check if you run itEPSS 0.42%Jun 2, 2026
- Medium6.9authentik is an open-source identity provider.Check if you run itEPSS 0.17%Jun 2, 2026
- Medium6.6React Router is a router for React.Check if you run itEPSS 0.22%Jun 2, 2026
- Critical9.8CrowCpp Crow through v1.3.1 HTTP is vulnerable to response header injection via unvalidated response header values.Check if you run itEPSS 0.33%Jun 2, 2026
- Low2.3Pterodactyl is a free, open-source game server management panel.Check if you run itEPSS 0.21%Jun 2, 2026
- Medium6.5wire-ios is an iOS client for the Wire secure messaging application.Check if you run itEPSS 0.24%Jun 2, 2026
- High7.3AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.Check if you run itEPSS 0.18%Jun 2, 2026
- High7.5React Router is a router for React.Check if you run itEPSS 0.29%Jun 2, 2026
- Medium6.1Northern.tech CFEngine Enterprise 3.24.3 before 3.24.4 and 3.27.0 before 3.27.1 allows XSS.Check if you run itEPSS 0.17%Jun 2, 2026
- Medium4.7React Router is a router for React.Check if you run itEPSS 0.19%Jun 2, 2026
- Medium6.1Cross Site Scripting vulnerability in usememos Memos v.0.26.0 allows a remote attacker to obtain sensitive information via the SANITIZE_SCHEMA, Memo Rendering Componen…Check if you run itEPSS 0.22%Jun 2, 2026
- High7.5SolarWinds Web Help Desk is found to be affected by a denial-of-service vulnerability, which when exploited, could cause the Web Help Desk server to crash due to insuf…Check if you run itEPSS 0.72%Jun 2, 2026
- High8.8The Content Visibility for Divi Builder plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.02 via the 'et_pb_text' sho…Check if you run itEPSS 0.71%Jun 2, 2026
- Medium4.3JIT miscompilation in the JavaScript Engine: JIT component.Check if you run itEPSS 0.86%Jun 2, 2026
Sort