Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.6Znuny through 7.3.6 constructs a ticket-search database query by directly concatenating user-supplied input into the SQL statement.Check if you run itEPSS 0.30%Oct 15, 2026
- Critical9.5In Znuny through 7.3.6, an attacker can bypass specific standard login procedures and gain unauthorized access to sensitive system functions by manipulating a specific…Check if you run itEPSS 0.23%Oct 15, 2026
- High7.1In DragonFly BSD through 6.4.2 before 4bb22ff, the ARP input handlers arpintr() and in_arpinput() (sys/netinet/if_ether.c) do not validate the hardware address length…Check if you run itEPSS 0.17%Oct 15, 2026
- Critical9.8Wheels 1.1.8 through 4.1.1 allows SQL injection when caller-supplied quoted values are parsed again as SQL by dynamic finders (such as findOneByEmail), the query build…Check if you run itEPSS 0.30%Oct 15, 2026
- Medium5.0Wheels CLI through 4.1.0 does not verify that the local development server answering its HTTP requests belongs to the current project.Check if you run itEPSS 0.10%Oct 15, 2026
- High8.8Netgate pfSense FRR package (pfSense-pkg-frr) 2.0.2_1 and source revision 2.1.2_1 contain an OS command injection vulnerability in the FRR status filter.Check if you run itEPSS 6.08%Oct 15, 2026
- High7.5A stack-based buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption that may result in DoS.Check if you run itEPSS 0.27%Oct 15, 2026
- Medium5.9A buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption and DoS.Check if you run itEPSS 0.23%Oct 15, 2026
- High7.5Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 mishandles tokens.Check if you run itEPSS 0.24%Oct 15, 2026
- High7.6A vulnerability in HPE NonStop QIOMON allows an out-of-bounds write that can corrupt buffer data.Check if you run itEPSS 0.18%Oct 15, 2026
- High8.7A vulnerability in HPE NonStop CIPSAM allows an out-of-bounds write that can corrupt buffer data.Check if you run itEPSS 0.11%Oct 15, 2026
- High8.7IntentKit 2.6.3 Executor Tool Authorization Bypass via ToolNodeCheck if you run itEPSS 0.39%Oct 15, 2026
- High7.5A vulnerability in the finger daemon of HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker to cause a denial of service.Check if you run itEPSS 0.30%Oct 15, 2026
- High8.7Ellucian WebAdvisor 3.2 Unauthenticated XXE InjectionCheck if you run itEPSS 0.34%Oct 15, 2026
- Medium5.3HPE NonStop TCP/IP UTILITIES - Denial of Service vulnerabilityCheck if you run itEPSS 0.16%Oct 15, 2026
- High8.7MoviePilot 3.1.5 Command Injection via ExecuteCommandToolCheck if you run itEPSS 1.00%Oct 15, 2026
- High7.5A security vulnerability in HPE NonStop SNMP Trap Multiplexer may cause memory corruptionCheck if you run itEPSS 0.26%Oct 15, 2026
- Medium5.3ApostropheCMS before 4.33.0 allows authentication bypass for REST API page reading, as demonstrated by a /api/v1/@apostrophecms/page?all=1 call.Check if you run itEPSS 0.25%Oct 15, 2026
- High8.7SODOLA SL902-SWTGW124AS Buffer Overflow DoS via Multipart Boundary ParserCheck if you run itEPSS 0.39%Oct 15, 2026
- Low2.8A vulnerability was detected in ggml-org whisper.cpp up to 1.9.4.Check if you run itEPSS 0.12%Oct 15, 2026
- High7.5kin-openapi is a Go project for handling OpenAPI files.Check if you run itEPSS 0.43%Oct 15, 2026
- High7.5Junrar is an open source Java RAR archive library.Check if you run itEPSS 0.40%Oct 15, 2026
- Mediumcontainerd: Unpack DoS via repeated opaque whiteoutsCheck if you run itEPSS 0.21%Oct 15, 2026
- High7.5FasterXML Jackson 1.x, confirmed in jackson-mapper-asl versions 1.8.3, 1.9.2, 1.9.11, 1.9.12, and 1.9.13, allows attackers to cause a denial of service by supplying de…Check if you run itEPSS 0.34%Oct 15, 2026
- Critical10.0Podman: The command can be instructed to disable almost all sandboxing by image annotationCheck if you run itEPSS 0.92%Oct 15, 2026