Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1The unstructured library provides open-source components for ingesting and pre-processing images and text documents, such as PDFs, HTML, Word docs, and many more.Check if you run itEPSS 0.19%Oct 13, 2026
- Critical9.3TanStack Router is a client-first, server-capable, fully type-safe router and full-stack framework for the web.Check if you run itEPSS 0.52%Oct 13, 2026
- High7.5Dio: Cross-origin redirect leaks sensitive request headers inCheck if you run itEPSS 0.36%Oct 13, 2026
- High7.1An integer underflow in OpenVPN version 2.7_alpha3 through 2.7.7 on Windows and Android allows remote authenticated servers to cause a denial of service or memory disc…Check if you run itEPSS 0.47%Oct 13, 2026
- Medium5.1Vulnerability in Citrix UniconOS leading to Arbitrary file read and write This issue affects UniconOS: before 2607.2 CR and before 2603 LTSR CU2.Check if you run itEPSS 0.34%Oct 13, 2026
- Medium6.9Vulnerability in Citrix UniconOS leading to Persistent Command Execution This issue affects UniconOS: before 2607.2 CR and before 2603 LTSR CU2.Check if you run itEPSS 0.21%Oct 13, 2026
- Medium6.9Authorization bypass through User-Controlled key vulnerability in HYPR Passwordless on Windows allows Privilege Escalation.Check if you run itEPSS 0.13%Oct 13, 2026
- Medium6.9Improper synchronization in the OpenVPN ovpn-dco-win for Windows versions 0.6.5 through 1.3.5 and 2.4.0 through 2.8.7 allows local attackers to trigger a deadlock via…Check if you run itEPSS 0.11%Oct 13, 2026
- Medium6.5ESF-IDF is the Espressif Internet of Things (IOT) Development Framework.Check if you run itEPSS 0.26%Oct 13, 2026
- Medium5.5For XSA-308 logic was introduced, as VMX VMEntry checks do not like the exact combination of state which occurs when #DB in intercepted, Single Stepping is active, and…Check if you run itEPSS 0.17%Oct 13, 2026
- High8.8XSA-501 was about issues with v1 -> v2 and v2 -> v1 changes racing certain other grant table operations.Check if you run itEPSS 0.18%Oct 13, 2026
- High8.8XPTI (Xen Page Table Isolation) was introduced to mitigate Meltdown (CVE-2017-5754, one aspect of XSA-254).Check if you run itEPSS 0.16%Oct 13, 2026
- Critical9.8The workaround for XSA-433 (Zenbleed, CVE-2023-20593) was later re-worked to better integrate with other manipulations of the same MSR.Check if you run itEPSS 0.16%Oct 13, 2026
- UnknownDuring Xenstore live update the state record for a Xenstore watch with specified watch depth is written with two bytes missing.Check if you run itEPSS 0.12%Oct 13, 2026
- Critical9.8An issue in SKYWORTH DIGITAL CO.,LTD SK-WR6640X Wi-Fi 6 Dual-Band Fiber Router (AX1800M) V1.0.3 allows a remote attacker to execute arbitrary code.Check if you run itEPSS 0.52%Oct 13, 2026
- Medium6.9A flaw has been found in slackero phpwcms up to 1.9.49/1.12.3.Check if you run itEPSS 0.38%Oct 13, 2026
- Medium5.5A security vulnerability has been detected in SourceCodester Simple Cafe Billing System 1.0.Check if you run itEPSS 0.47%Oct 13, 2026
- Medium5.5A vulnerability was determined in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5.Check if you run itEPSS 0.51%Oct 13, 2026
- Medium5.5A flaw was found in BlueZ.Check if you run itEPSS 0.12%Oct 13, 2026
- Medium5.3Plane is an open-source project management tool.Check if you run itEPSS 0.24%Oct 13, 2026
- High7.5[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] 1) XSA-437 (CVE-2023-34321) addressed…Check if you run itEPSS 0.15%Oct 13, 2026
- Medium4.7With its original introduction, GNTTAB_cache_flush was made available uniformly.Check if you run itEPSS 0.18%Oct 13, 2026
- High7.5[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] 1) XSA-437 (CVE-2023-34321) addressed…Check if you run itEPSS 0.15%Oct 13, 2026
- Medium6.9Axios is a promise-based HTTP client for the browser and Node.js.Check if you run itEPSS 0.53%Oct 13, 2026
- Medium6.1ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the PageTitle/Notes parameter in the Notes.aspx endpoint.Check if you run itEPSS 0.19%Oct 13, 2026