Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.8WordPress Plugin ultimate-member 2.1.3 contains a local file inclusion vulnerability that allows authenticated attackers to include arbitrary files by manipulating the…Check if you run itEPSS 0.25%May 13, 2026
- Critical9.3Ecommerce Systempay 1.0 contains a weak cryptographic implementation vulnerability that allows attackers to brute force the 16-character production secret key used for…Check if you run itEPSS 0.25%May 13, 2026
- High8.7Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in mtrudel bandit allows unauthenticated remote denial of service via worker process exhaustion.Check if you run itEPSS 0.94%May 13, 2026
- High8.7Allocation of Resources Without Limits or Throttling vulnerability in mtrudel bandit allows unauthenticated remote denial of service via memory exhaustion.Check if you run itEPSS 0.97%May 13, 2026
- Critical9.3ELECOM wireless LAN access point devices contain an OS command injection in processing of username parameter.Check if you run itEPSS 2.26%May 13, 2026
- High8.6ELECOM wireless LAN access point devices contain an OS command injection vulnerability in processing of ping_ip_addr parameter.Check if you run itEPSS 1.71%May 13, 2026
- Medium5.3When curl is told to use the Certificate Status Request TLS extension, often referred to as *OCSP stapling*, to verify that the server certificate is valid, it fails t…Check if you run itEPSS 0.32%May 13, 2026
- High7.5Using libcurl, when a custom header is first set for an HTTP request and a second request is subsequently done using the same *easy handle* but without the custom header set, the sCheck if you run itEPSS 0.35%May 13, 2026
- High7.5libcurl might in some circumstances reuse the wrong connection for SMB(S) transfers.Check if you run itEPSS 0.66%May 13, 2026
- Medium6.5libcurl might in some circumstances reuse the wrong connection when asked to do an authenticated HTTP(S) request after a Negotiate-authenticated one, when both use the same host.Check if you run itEPSS 0.41%May 13, 2026
- Medium5.9A vulnerability exists where a connection requiring TLS incorrectly reuses an existing unencrypted connection from the same connection pool.Check if you run itEPSS 0.36%May 13, 2026
- Critical9.3Stack-based buffer overflow vulnerability exists in GUARDIANWALL MailSuite and GUARDIANWALL Mail Security Cloud (SaaS version).Patch nowKEVEPSS 0.73%May 13, 2026
- High7.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 9.0 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an…Check if you run itEPSS 0.36%May 13, 2026
- Critical9.4Scramble generates API documentation for Laravel project.Check if you run itEPSS 3.87%May 12, 2026
- High8.1efw4.X is an Enterprise Framework for Web.Check if you run itEPSS 0.40%May 12, 2026
- Low3.7Micronaut Framework is a JVM-based full stack Java framework designed for building modular, easily testable JVM applications.Check if you run itEPSS 0.33%May 12, 2026
- High7.5Micronaut Framework is a JVM-based full stack Java framework designed for building modular, easily testable JVM applications.Check if you run itEPSS 0.72%May 12, 2026
- Critical9.9Nginx UI is a web user interface for the Nginx web server.Check if you run itEPSS 0.39%May 12, 2026
- High7.5arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and ESP32-H2 microcontrollers.Check if you run itEPSS 0.51%May 12, 2026
- High7.5Granian is a Rust HTTP server for Python applications.Check if you run itEPSS 0.46%May 12, 2026
- Critical9.9django-s3file is a lightweight file upload input for Django and Amazon S3.Check if you run itEPSS 0.59%May 12, 2026
- High7.1Craft CMS is a content management system (CMS).Check if you run itEPSS 0.36%May 12, 2026
- High8.6Craft CMS is a content management system (CMS).Check if you run itEPSS 0.44%May 12, 2026
- High7.2Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8 and AOS-…Check if you run itEPSS 0.62%May 12, 2026
- High7.2Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8 and AOS-…Check if you run itEPSS 0.62%May 12, 2026