Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.0A remote user who can read encrypted objects in the S3 bucket can force a padding downgrade by altering the padding scheme recorded in an object's metadata to legacy PKCS#1 v1.5.Check if you run itEPSS 0.51%Oct 14, 2026
- High8.1Plane is an open-source project management tool.Check if you run itEPSS 0.42%Oct 14, 2026
- Medium6.5Plane is an open-source project management tool.Check if you run itEPSS 0.28%Oct 14, 2026
- Medium6.5Plane is an open-source project management tool.Check if you run itEPSS 0.30%Oct 14, 2026
- Medium6.5FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.Check if you run itEPSS 0.29%Oct 14, 2026
- High8.1FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.Check if you run itEPSS 0.50%Oct 14, 2026
- High8.8An improper access control vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem in export settings, potentially allowing a remote…Check if you run itEPSS 0.31%Oct 14, 2026
- High8.2OpenAEV is an open source platform allowing organizations to plan, schedule and conduct cyber adversary simulation campaign and tests.Check if you run itEPSS 0.24%Oct 14, 2026
- Medium4.8FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.Check if you run itEPSS 0.28%Oct 14, 2026
- Critical9.8WeGIA is a web manager for charitable institutions.Check if you run itEPSS 0.47%Oct 14, 2026
- High8.1WeGIA is a web manager for charitable institutions.Check if you run itEPSS 0.34%Oct 14, 2026
- High8.8WeGIA is a web manager for charitable institutions.Check if you run itEPSS 0.45%Oct 14, 2026
- Medium6.5WeGIA is a web manager for charitable institutions.Check if you run itEPSS 0.43%Oct 14, 2026
- Critical9.8WeGIA: Unauthenticated SQL Injection in cadastro_cobranca.php via "codigo" parameterCheck if you run itEPSS 0.49%Oct 14, 2026
- Critical9.8WeGIA: SQL Injection in html/socio/sistema/cadastro_cobranca.phpCheck if you run itEPSS 0.47%Oct 14, 2026
- High7.6InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates.Check if you run itEPSS 0.38%Oct 14, 2026
- Highlibcurl could accidentally return a URL for 's option containing credentials, even though neither the URL provided to libcurl nor the redirected URL did.Check if you run itEPSS 0.27%Oct 14, 2026
- HighA deeply nested multipart MIME structure constructed via the public API causes a stack overflow in libcurl during normal cleanup operations.Check if you run itEPSS 0.28%Oct 14, 2026
- Highlibcurl's TFTP state machine fails to validate state transitions against the requested transfer direction, accepting opening server responses for both reads and writes…Check if you run itEPSS 0.29%Oct 14, 2026
- CriticalWhen an FTP wildcard operation fails, libcurl omits the restoration path meant for successful listings, leaving the write callback set to the internal listing parser a…Check if you run itEPSS 0.29%Oct 14, 2026
- UnknownEnabling causes curl to advertise the raw input byte count in the literal while transmitting line-ending expanded data.Check if you run itEPSS 0.21%Oct 14, 2026
- UnknownAn authenticated HTTPS origin can supply an HSTS value that the parser accepts, but time serialization later fails to process.Check if you run itEPSS 0.29%Oct 14, 2026
- UnknownImporting a parent HSTS entry before a longer-lived child entry, silently drops the child.Check if you run itEPSS 0.29%Oct 14, 2026
- UnknownAn HTTP proxy can trick libcurl into sending the origin's credentials (Basic password, or a Negotiate/Kerberos ticket) to the proxy itself, by answering the tunnel req…Check if you run itEPSS 0.29%Oct 14, 2026
- UnknownSetting to NULL but does not disable SigV4 authentication, contrary to expectations and documentation.Check if you run itEPSS 0.25%Oct 14, 2026
Sort