Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.8pyLoad is a free and open-source download manager written in Python.Check if you run itEPSS 0.19%May 11, 2026
- High7.8Wellbia's XIGNCODE3 xhunter1.sys kernel driver, version 10.0.10011.16384 through 2023.12.7.78, privilege escalation vulnerability provides access to the IRP_MJ_WRITE c…Check if you run itEPSS 0.16%May 11, 2026
- High8.1HireFlow v1.2 is vulnerable to Incorrect Access Control.Check if you run itEPSS 0.41%May 11, 2026
- None0.0Vulnerability in Wikimedia Foundation MediaWiki.Check if you run itEPSS 0.28%May 11, 2026
- High7.1A Server-Side Request Forgery (SSRF) vulnerability exists in MLflow versions prior to 3.9.0.Check if you run itEPSS 0.29%May 11, 2026
- Low2.1Cookie Request Header Injection via Unvalidated Encoder in cow_cookie:cookie/1Check if you run itEPSS 0.21%May 11, 2026
- High8.8OWASP BLT is a QA testing and vulnerability disclosure platform that encompasses websites, apps, git repositories, and more.Check if you run itEPSS 0.46%May 11, 2026
- High7.6Clerk JavaScript is the official JavaScript repository for Clerk authentication.Check if you run itEPSS 0.43%May 11, 2026
- Low2.1A weakness has been identified in Open5GS up to 2.7.7.Check if you run itEPSS 0.69%May 11, 2026
- High7.1Local file inclusion (LFI) and server-side request forgery (SSRF) vulnerabilities in pgAdmin 4 LLM API configuration endpoints.Check if you run itEPSS 0.35%May 11, 2026
- Critical9.4Authorization vulnerability in pgAdmin 4 server mode affecting Server Groups, Servers, Shared Servers, Background Processes, and Debugger modules.Check if you run itEPSS 0.65%May 11, 2026
- Critical9.4Grav is a file-based Web platform.Check if you run itEPSS 0.56%May 11, 2026
- High8.1Grav is a file-based Web platform.Check if you run itEPSS 0.58%May 11, 2026
- High8.8Grav is a file-based Web platform.Patch nowKEVEPSS 0.52%May 11, 2026
- Low2.1A vulnerability was determined in Open5GS up to 2.7.7.Check if you run itEPSS 0.69%May 11, 2026
- High8.6The Magic Link authentication flow accepts multiple invalid authentication requests without adequate rate limiting or resource control, leading to uncontrolled memory usage growth.Check if you run itEPSS 0.32%May 11, 2026
- High7.5In Webhook API invocations, the component accepts user-supplied input for HTTP request headers without sufficient validation or sanitization, allowing these headers to…Check if you run itEPSS 0.19%May 11, 2026
- Unknowngetflightpath flightpath Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 62.57%May 11, 2026
- Medium5.1uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the backend/mailingLog/manage module.Check if you run itEPSS 0.25%May 10, 2026
- Medium5.1uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the auctions/manage module.Check if you run itEPSS 0.25%May 10, 2026
- Medium5.1uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the tickets/manage module.Check if you run itEPSS 0.25%May 10, 2026
- Medium5.1uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the news/manage module.Check if you run itEPSS 0.25%May 10, 2026
- Medium5.1uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the posts/manage module.Check if you run itEPSS 0.25%May 10, 2026
- Medium5.1uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the auctions/myAuctions/status/loose module.Check if you run itEPSS 0.25%May 10, 2026
- Medium5.1uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the auctions/myAuctions/status/active module.Check if you run itEPSS 0.25%May 10, 2026