Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9BottleCRM 0.43 through 1.14.5 contains a regular expression denial of service vulnerability that allows authenticated organization administrators to block web workers…Check if you run itEPSS 0.64%Oct 14, 2026
- Medium5.3BottleCRM through 1.14.5 contains a server-side template injection vulnerability in the send_email Celery task, which compiles the user-supplied AccountEmail message_b…Check if you run itEPSS 0.44%Oct 14, 2026
- Medium5.1BottleCRM 0.30 through 1.14.5 contains an HTML injection vulnerability in render_invoice_template() that allows authenticated organization members to inject markup int…Check if you run itEPSS 0.36%Oct 14, 2026
- Medium6.8OW2 ASM 1.4.3 before 9.11 contains an excessive resource consumption vulnerability in Analyzer.analyze() that allows attackers to exhaust memory and CPU via crafted class files.Check if you run itEPSS 0.17%Oct 14, 2026
- Medium6.8OW2 ASM 3.0 before 9.11 contains an uncontrolled memory allocation vulnerability in the asm-commons JSRInlinerAdapter that inlines JSR/RET subroutines without memory o…Check if you run itEPSS 0.17%Oct 14, 2026
- Medium6.8OW2 ASM 3.0 before 9.11 contains an uncontrolled recursion vulnerability in SignatureReader.parseType() that allows attackers to exhaust the stack via deeply nested ge…Check if you run itEPSS 0.17%Oct 14, 2026
- Medium4.8OW2 ASM 3.1 before 9.11 contains an excessive memory allocation vulnerability in the asm-commons AdviceAdapter that allows attackers to exhaust memory by supplying cra…Check if you run itEPSS 0.17%Oct 14, 2026
- Medium6.8OW2 ASM 3.0 before 9.11 contains a denial of service vulnerability that allows attackers to exhaust CPU by supplying crafted class files processed with ClassWriter.COMPUTE_FRAMES.Check if you run itEPSS 0.17%Oct 14, 2026
- Medium6.8OW2 ASM 3.0 before 9.11 contains a quadratic memory allocation vulnerability in MethodWriter.computeMaxStackAndLocal() and computeAllFrames() when using COMPUTE_MAXS o…Check if you run itEPSS 0.17%Oct 14, 2026
- Medium6.8OW2 ASM 3.0 before 9.11 contains an uncontrolled recursion vulnerability in ClassWriter.replaceAsmInstructions() that allows attackers to cause denial of service throu…Check if you run itEPSS 0.17%Oct 14, 2026
- Medium6.8OW2 ASM 3.0 before 9.11 contains an excessive memory allocation vulnerability in Label.addSubroutineRetSuccessors() that fails to enforce the single-RET-per-JSR rule.Check if you run itEPSS 0.17%Oct 14, 2026
- Medium6.8OW2 ASM 5.0 before 9.11 contains an excessive memory allocation vulnerability in ClassReader.readBootstrapMethodsAttribute() that sizes an int array from num_bootstrap…Check if you run itEPSS 0.17%Oct 14, 2026
- Medium6.5svg-sanitizer is a PHP SVG/XML sanitizer.Check if you run itEPSS 0.42%Oct 14, 2026
- High8.7Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.Check if you run itEPSS 0.72%Oct 14, 2026
- High7.7Kaneo before 2.1.6 contains a missing authorization vulnerability that allows authenticated users to access other workspaces by supplying project, task, label or works…Check if you run itEPSS 0.57%Oct 14, 2026
- Medium4.8PhysicsFS through 3.2.0 contains an out-of-bounds read vulnerability in __PHYSFS_utf8codepoint() that allows attackers to read past name buffers via an off-by-one curs…Check if you run itEPSS 0.17%Oct 14, 2026
- Critical9.3office-converter through 1.0.2 contains an OS command injection vulnerability that allows attackers to execute commands by supplying a crafted fileName to generatePdf(…Check if you run itEPSS 3.04%Oct 14, 2026
- Critical9.2Gravitee API Management through 4.12.22 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to impersonate any user by forging…Check if you run itEPSS 0.88%Oct 14, 2026
- High8.5DevIL through 1.8.0 contains a heap-based buffer overflow in iGetPalette() in il_gif.cpp that allows attackers to write beyond a 768-byte palette buffer when loading GIF images.Check if you run itEPSS 0.20%Oct 14, 2026
- Medium6.8L-SMASH through 2.14.5 contains an infinite loop vulnerability in vc1_importer_probe() in importer/vc1_imp.c that allows attackers to hang applications via crafted input files.Check if you run itEPSS 0.24%Oct 14, 2026
- High7.5Incorrect implementation of authentication algorithm vulnerability in Progress MOVEit Transfer (SFTP module).Check if you run itEPSS 0.39%Oct 14, 2026
- High8.6Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerabilit…Check if you run itEPSS 0.42%Oct 14, 2026
- High7.2Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Progress MOVEit Transfer (Custom Reports module).Check if you run itEPSS 0.49%Oct 14, 2026
- High7.3Insecure Storage of Sensitive Information vulnerability in Progress MOVEit Transfer.Check if you run itEPSS 0.17%Oct 14, 2026
- High7.5Improper handling of unicode encoding vulnerability in Progress MOVEit Transfer.Check if you run itEPSS 0.40%Oct 14, 2026