Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.4PlantUML Macro is a macro for rendering UML diagrams from simple textual schemes.Check if you run itEPSS 0.27%May 4, 2026
- Critical9.4In plain terms, Apache Polaris is supposed to issue short-lived GCS credentials that only work for one table's files, but a crafted namespace or table name can cause t…Check if you run itEPSS 0.72%May 4, 2026
- Critical9.4Apache Polaris can issue broad temporary ("vended") storage credentials during staged table creation before the effective table location has been validated or durably reserved.Check if you run itEPSS 0.58%May 4, 2026
- Critical9.1XML External Entity (XXE) via Unsanitized Dictionary Parsing in Apache OpenNLP DictionaryEntryPersistor Versions Affected: before 2.5.9, before 3.0.0-M3 Description: T…Check if you run itEPSS 0.84%May 4, 2026
- High7.5A NULL pointer dereference in mod_dav_lock in Apache HTTP Server 2.4.66 and earlier may allow an attacker to crash the server with a malicious request.mod_dav_lock is…Check if you run itEPSS 1.57%May 4, 2026
- High7.4A vulnerability was detected in Totolink N300RH 3.2.4-B20220812.Check if you run itEPSS 0.79%May 4, 2026
- High7.4A security vulnerability has been detected in Totolink N300RH 3.2.4-B20220812.Check if you run itEPSS 0.79%May 4, 2026
- High7.4A weakness has been identified in Totolink N300RH 3.2.4-B20220812.Check if you run itEPSS 0.79%May 4, 2026
- Low2.1A vulnerability was detected in code-projects BloodBank Managing System 1.0.Check if you run itEPSS 0.35%May 4, 2026
- Low2.1A security flaw has been discovered in pixelsock directus-mcp 1.0.0.Check if you run itEPSS 0.37%May 4, 2026
- Low2.1A weakness has been identified in Totolink WA300 5.2cu.7112_B20190227.Check if you run itEPSS 1.77%May 4, 2026
- High8.9A security flaw has been discovered in Totolink WA300 5.2cu.7112_B20190227.Check if you run itEPSS 1.02%May 4, 2026
- Low2.1A vulnerability was identified in Totolink WA300 5.2cu.7112_B20190227.Check if you run itEPSS 1.77%May 4, 2026
- High7.4A vulnerability was determined in Totolink WA300 5.2cu.7112_B20190227.Check if you run itEPSS 0.79%May 4, 2026
- Medium5.5A flaw has been found in crocodilestick Calibre-Web-Automated up to 4.0.6.Check if you run itEPSS 0.79%May 4, 2026
- Critical9.0A stack overflow vulnerability exists in the WebCam Server Login functionality of GeoVision GV-VMS V20 20.0.2.Check if you run itEPSS 0.75%May 4, 2026
- Medium6.1Multiple reflected cross-site scripting (xss) vulnerabilities exist in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10.Check if you run itEPSS 0.34%May 4, 2026
- Critical9.8A stack overflow vulnerability exists in the WebCam Server Login functionality of GeoVision GV-VMS V20 20.0.2.Check if you run itEPSS 1.00%May 4, 2026
- Critical9.9A privilege escalation vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10.Check if you run itEPSS 0.62%May 4, 2026
- Medium6.5A privilege escalation vulnerability exists in the Web Interface / ssi.cgi functionality of GeoVision LPC2011/LPC2211 1.10.Check if you run itEPSS 0.50%May 4, 2026
- High7.5A guessable session cookie vulnerability exists in the Web Interface functionality of GeoVision LPC2011/LPC2211 1.10.Check if you run itEPSS 0.57%May 4, 2026
- Unknownays-pro quiz_maker Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 11.76%May 4, 2026
- Low2.1A vulnerability has been found in Open5GS up to 2.7.7.Check if you run itEPSS 0.47%May 3, 2026
- Low2.1A security vulnerability has been detected in Telegram Desktop up to 6.7.5.Check if you run itEPSS 0.51%May 3, 2026
- Medium6.5During the analysis, it was identified that authenticated attackers with Subscriber-level access or higher are able to perform an Insecure Direct Object Reference (IDOR) attack.Check if you run itEPSS 0.34%May 3, 2026