Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.6TanStack Unspecified VulnerabilityPatch nowKEVEPSS 1.05%May 11, 2026
- High8.8Grav is a file-based Web platform.Patch nowKEVEPSS 0.52%May 11, 2026
- High7.3Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.81%May 11, 2026
- High7.8Linux Kernel Out-of-bounds WritePatch nowKEVEPSS 2.62%May 11, 2026
- High7.5An integer overflow in network packet parsing code in PgBouncer before 1.25.2 bypasses a boundary check and can lead to a crash.Patch nowKEVEPSS 0.73%May 9, 2026
- High7.3PraisonAI is a multi-agent teams system.Patch nowKEVEPSS 0.82%May 8, 2026
- Critical9.3Daemon Tools Lite Embedded Malicious Code VulnerabilityPatch nowKEVEPSS 0.96%May 8, 2026
- High8.8Linux Kernel Write-what-where ConditionPatch nowKEVEPSS 94.19%May 8, 2026
- High8.7BerriAI LiteLLM Command Injection VulnerabilityPatch nowKEVEPSS 92.57%May 7, 2026
- High7.2Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation VulnerabilityPatch nowKEVEPSS 2.54%May 7, 2026
- High8.8The Slider Revolution plugin for WordPress is vulnerable to Arbitrary File Upload in versions 7.0.0 to 7.0.10 via the '_get_media_url' and '_check_file_path' function.Patch nowKEVEPSS 0.79%May 7, 2026
- Medium6.1Postorius through 1.3.13 does not escape HTML in the message subject when rendering it in the Held messages pop-up, as exploited in the wild in May 2026.Patch nowKEVEPSS 0.33%May 7, 2026
- UnknownW3 Total Cache '_parse_dynamic_mfunc' Command InjectionPatch nowKEVEPSS 22.11%May 7, 2026
- Critical9.8OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables.Patch nowKEVEPSS 4.68%May 5, 2026
- High7.7Redis is an in-memory data structure store.Patch nowKEVEPSS 3.66%May 5, 2026
- Critical9.1Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.56%May 5, 2026
- Medium6.9Arista Extensible Operating System Incomplete Comparison with Missing Factors VulnerabilityPatch nowKEVEPSS 0.65%May 5, 2026
- Critical9.3Palo Alto Networks PAN-OS Out-of-bounds Write VulnerabilityPatch nowKEVEPSS 31.72%May 5, 2026
- Unknowncleantalk security_\&_malware_scan Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 1.58%May 5, 2026
- Unknownscriptsbundle adforest Weak Password Recovery Mechanism for Forgotten PasswordPatch nowKEVEPSS 0.72%May 5, 2026
- Unknownscriptsbundle adforest Authentication Bypass Using an Alternate Path or ChannelPatch nowKEVEPSS 1.22%May 5, 2026
- Critical9.2workiva arelle Missing Authentication for Critical FunctionPatch nowKEVEPSS 3.88%May 4, 2026
- High8.8Ollama before 0.17.1 contains a heap out-of-bounds read vulnerability in the GGUF model loader.Patch nowKEVEPSS 0.71%May 4, 2026
- Unknowncridio listingpro Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 0.40%May 4, 2026
- Unknownmetagauss registrationmagic Improper Privilege ManagementPatch nowKEVEPSS 1.65%May 4, 2026
Sort