Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7JWT tokens that were used by workers in Kubernetes Executors have been exposed to users who had read only access to Kuberentes Pods.Check if you run itEPSS 0.21%May 19, 2026
- Critical9.8Camel-CXF and Camel-Knative Message Header Injection via Missing Inbound Filtering The CXF and Knative HeaderFilterStrategy implementations (CxfRsHeaderFilterStrategy…Check if you run itEPSS 1.60%May 19, 2026
- High8.8Improper Control of Generation of Code ('Code Injection'), Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') vulnerability in Apache OFBiz.Check if you run itEPSS 0.71%May 19, 2026
- Critical9.8Improper Authentication vulnerability in Apache OFBiz via Password-Change Logic Flaw Leading to Remote Code Execution This issue affects Apache OFBiz: before 24.09.06.Check if you run itEPSS 1.29%May 19, 2026
- Medium6.5Improper Authorization vulnerability in Apache OFBiz Webtools.Check if you run itEPSS 0.65%May 19, 2026
- Critical9.1Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability in Apache OFBiz.Check if you run itEPSS 0.59%May 19, 2026
- Medium6.5Improper Control of Generation of Code ('Code Injection') vulnerability in email services of Apache OFBiz.Check if you run itEPSS 0.63%May 19, 2026
- Critical9.1Use of Hard-coded Cryptographic Key vulnerability in Apache OFBiz.Check if you run itEPSS 0.56%May 19, 2026
- High7.5Server-Side Request Forgery (SSRF) vulnerability in Apache OFBiz.Check if you run itEPSS 0.58%May 19, 2026
- High7.5Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache OFBiz.Check if you run itEPSS 0.61%May 19, 2026
- Medium6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache OFBiz.Check if you run itEPSS 0.57%May 19, 2026
- Medium5.3Improper Access Control vulnerability in Apache OFBiz in multi-tenant deployments.Check if you run itEPSS 0.54%May 19, 2026
- Medium5.3Improper Authentication vulnerability in Apache OFBiz.Check if you run itEPSS 0.60%May 19, 2026
- Medium6.5Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection') vulnerability in Apache OFBiz.Check if you run itEPSS 0.63%May 19, 2026
- Medium6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'), Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), I…Check if you run itEPSS 0.70%May 19, 2026
- Medium6.5Improper Input Validation vulnerability in Apache OFBiz.Check if you run itEPSS 0.67%May 19, 2026
- High7.3Server-Side Request Forgery (SSRF) vulnerability in Apache OFBiz via Content component operations.Check if you run itEPSS 0.61%May 19, 2026
- Medium6.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz.Check if you run itEPSS 0.80%May 19, 2026
- Medium6.5Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Apache OFBiz.Check if you run itEPSS 0.63%May 19, 2026
- Medium6.9Simple Fields 0.2 through 0.3.5 WordPress Plugin contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by injecti…Check if you run itEPSS 0.53%May 17, 2026
- Critical9.1OpenMRS is an open source electronic medical record system platform.Check if you run itEPSS 0.54%May 15, 2026
- High8.1Code injection in SQL code generation in Apache Flink 1.15.0 through 1.20.x and 2.0.0 through 2.x allows authenticated users with query submission privileges to execut…Check if you run itEPSS 0.66%May 15, 2026
- Medium6.5Apache::Session::Generate::SHA256 versions before 1.3.19 for Perl create insecure session ids.Check if you run itEPSS 0.39%May 15, 2026
- Medium5.3Uncontrolled Recursion vulnerability in Apache Commons.Check if you run itEPSS 0.82%May 14, 2026
- High8.2ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx.Check if you run itEPSS 0.49%May 12, 2026