Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8The workaround for XSA-433 (Zenbleed, CVE-2023-20593) was later re-worked to better integrate with other manipulations of the same MSR.Check if you run itEPSS 0.16%Oct 13, 2026
- Medium5.5A vulnerability was determined in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5.Check if you run itEPSS 0.51%Oct 13, 2026
- Medium5.3Plane is an open-source project management tool.Check if you run itEPSS 0.24%Oct 13, 2026
- High7.5[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] 1) XSA-437 (CVE-2023-34321) addressed…Check if you run itEPSS 0.15%Oct 13, 2026
- Medium4.7With its original introduction, GNTTAB_cache_flush was made available uniformly.Check if you run itEPSS 0.18%Oct 13, 2026
- High7.5[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] 1) XSA-437 (CVE-2023-34321) addressed…Check if you run itEPSS 0.15%Oct 13, 2026
- Medium6.9Axios is a promise-based HTTP client for the browser and Node.js.Check if you run itEPSS 0.53%Oct 13, 2026
- Medium6.1ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the PageTitle/Notes parameter in the Notes.aspx endpoint.Check if you run itEPSS 0.19%Oct 13, 2026
- Critical9.8ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an incorrect access control issue in sensitive API endpoints.Check if you run itEPSS 0.35%Oct 13, 2026
- High8.8Leantime: Any Authenticated User Can Self-Escalate to Admin via Unauthorized JSON-RPC MethodsCheck if you run itEPSS 0.33%Oct 13, 2026
- High7.1Collection validators using collation-accepting expressions can crash MongoDB Server on insertCheck if you run itEPSS 0.24%Oct 13, 2026
- Critical9.9Legacy Update is a tool for activating and installing updates on legacy Windows PCs.Check if you run itEPSS 0.21%Oct 13, 2026
- Medium4.2JupyterLab: Command link trust prompt in JupyterLab can trust a document other than the one clickedCheck if you run itEPSS 0.14%Oct 13, 2026
- High8.6CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation.Check if you run itEPSS 0.49%Oct 13, 2026
- High7.5CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass.Check if you run itEPSS 0.43%Oct 13, 2026
- High7.5CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass.Check if you run itEPSS 0.43%Oct 13, 2026
- High7.5Libreswan's pluto daemon has a use-after-free vulnerability when a client connecting using IKE over TCP closes the connection and another packet (retransmit or malicio…Check if you run itEPSS 0.45%Oct 13, 2026
- High7.5Libreswan has a null pointer dereference bug in the PKCS#7 handling code for IKE certificate authentication.Check if you run itEPSS 0.34%Oct 13, 2026
- High8.7MediaAgent contained a heap-based buffer overflow issue affecting service availability.Check if you run itEPSS 0.32%Oct 13, 2026
- Critical9.3CVFS contained an input validation issue affecting command execution.Check if you run itEPSS 0.39%Oct 13, 2026
- High7.7CVFS contained a missing authentication condition affecting command execution.Check if you run itEPSS 0.23%Oct 13, 2026
- High7.1CvFWD contained a null pointer dereference affecting service availability.Check if you run itEPSS 0.23%Oct 13, 2026
- High7.1CvFWD contained an out-of-bounds write affecting service availability.Check if you run itEPSS 0.23%Oct 13, 2026
- High7.1CvFWD contained an integer overflow affecting service availability.Check if you run itEPSS 0.23%Oct 13, 2026
- High8.7CVFS contained an XML external entity (XXE) reference handling issue affecting information dislcosure.Check if you run itEPSS 0.33%Oct 13, 2026