Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1BizSpring Shop through commit cf22d39daaf1 contains a payment verification bypass vulnerability that allows authenticated buyers to mark orders paid by calling the Pay…Check if you run itEPSS 0.30%Oct 14, 2026
- Medium4.8LibreCAD libdxfrw through LC2.2.0 (LibreCAD through 2.2.1.5) contains a stack-based out-of-bounds read vulnerability in dwgReader18::readFileHeader() caused by calling…Check if you run itEPSS 0.17%Oct 14, 2026
- Medium6.8libschrift through 0.10.2 contains a divide by zero vulnerability that allows attackers to crash applications by supplying a font with unitsPerEm of 0 in the head table.Check if you run itEPSS 0.20%Oct 14, 2026
- Low2.0Mini-XML 4.0.0 through 4.0.6 contains an off-by-one stack out-of-bounds write in mxml_strtod() when the locale decimal point is not '.'.Check if you run itEPSS 0.22%Oct 14, 2026
- Medium5.8LASzip through 3.5.0 contains an invalid free vulnerability in laszip_read_header() that allows attackers to free uninitialized heap pointers via truncated variable le…Check if you run itEPSS 0.17%Oct 14, 2026
- Medium5.8libmspack through 0.11alpha contains an uninitialized pointer free vulnerability in kwajd_open() in mspack/kwajd.c that frees unzeroed filename and extra pointers on header read erCheck if you run itEPSS 0.24%Oct 14, 2026
- Medium5.8libsixel before 1.8.7-r1 and 1.9.0 through 1.10.5 contains a heap out-of-bounds write vulnerability in gif_init_frame() in src/fromgif.c, which never checks the GIF tr…Check if you run itEPSS 0.17%Oct 14, 2026
- Medium6.8xlsxio through 0.2.37 contains a NULL pointer dereference vulnerability in main_sheet_get_sheetfile_expat_callback_element_start() in lib/xlsxio_read.c that allows att…Check if you run itEPSS 0.24%Oct 14, 2026
- Medium6.9L-SMASH through 2.14.5 contains a double free vulnerability in hevc_setup_first_summary() and h264_setup_first_summary() in importer/nalu_imp.c that frees borrowed cod…Check if you run itEPSS 0.24%Oct 14, 2026
- Medium6.9Libyal libpff through 20260926 contains an integer underflow in libpff_record_entry_get_multi_value() that allows attackers to trigger heap out-of-bounds reads via non…Check if you run itEPSS 0.17%Oct 14, 2026
- Medium6.9Tinyexr through 3.2.0 contains a heap out-of-bounds read vulnerability in ParseEXRMultipartHeaderFromMemory() that allows attackers to read beyond buffers due to a sta…Check if you run itEPSS 0.25%Oct 14, 2026
- Medium6.8quirc through 1.2 contains an excessive-iteration vulnerability in find_alignment_pattern() in lib/identify.c that allows attackers to hang quirc_end() with a crafted image.Check if you run itEPSS 0.17%Oct 14, 2026
- Medium5.3BottleCRM 0.45 through 1.14.5 contains an uncontrolled memory allocation vulnerability in _read_upload() that reads entire CSV uploads before enforcing the 5 MB limit.Check if you run itEPSS 0.47%Oct 14, 2026
- Medium6.9BottleCRM 0.43 through 1.14.5 contains a regular expression denial of service vulnerability that allows authenticated organization administrators to block web workers…Check if you run itEPSS 0.64%Oct 14, 2026
- Medium5.3BottleCRM through 1.14.5 contains a server-side template injection vulnerability in the send_email Celery task, which compiles the user-supplied AccountEmail message_b…Check if you run itEPSS 0.44%Oct 14, 2026
- Medium5.1BottleCRM 0.30 through 1.14.5 contains an HTML injection vulnerability in render_invoice_template() that allows authenticated organization members to inject markup int…Check if you run itEPSS 0.36%Oct 14, 2026
- Medium6.8OW2 ASM 1.4.3 before 9.11 contains an excessive resource consumption vulnerability in Analyzer.analyze() that allows attackers to exhaust memory and CPU via crafted class files.Check if you run itEPSS 0.17%Oct 14, 2026
- Medium6.8OW2 ASM 3.0 before 9.11 contains an uncontrolled memory allocation vulnerability in the asm-commons JSRInlinerAdapter that inlines JSR/RET subroutines without memory o…Check if you run itEPSS 0.17%Oct 14, 2026
- Medium6.8OW2 ASM 3.0 before 9.11 contains an uncontrolled recursion vulnerability in SignatureReader.parseType() that allows attackers to exhaust the stack via deeply nested ge…Check if you run itEPSS 0.17%Oct 14, 2026
- Medium4.8OW2 ASM 3.1 before 9.11 contains an excessive memory allocation vulnerability in the asm-commons AdviceAdapter that allows attackers to exhaust memory by supplying cra…Check if you run itEPSS 0.17%Oct 14, 2026
- Medium6.8OW2 ASM 3.0 before 9.11 contains a denial of service vulnerability that allows attackers to exhaust CPU by supplying crafted class files processed with ClassWriter.COMPUTE_FRAMES.Check if you run itEPSS 0.17%Oct 14, 2026
- Medium6.8OW2 ASM 3.0 before 9.11 contains a quadratic memory allocation vulnerability in MethodWriter.computeMaxStackAndLocal() and computeAllFrames() when using COMPUTE_MAXS o…Check if you run itEPSS 0.17%Oct 14, 2026
- Medium6.8OW2 ASM 3.0 before 9.11 contains an uncontrolled recursion vulnerability in ClassWriter.replaceAsmInstructions() that allows attackers to cause denial of service throu…Check if you run itEPSS 0.17%Oct 14, 2026
- Medium6.8OW2 ASM 3.0 before 9.11 contains an excessive memory allocation vulnerability in Label.addSubroutineRetSuccessors() that fails to enforce the single-RET-per-JSR rule.Check if you run itEPSS 0.17%Oct 14, 2026
- Medium6.8OW2 ASM 5.0 before 9.11 contains an excessive memory allocation vulnerability in ClassReader.readBootstrapMethodsAttribute() that sizes an int array from num_bootstrap…Check if you run itEPSS 0.17%Oct 14, 2026