Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Critical9.8Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.KEVEPSS 1.0%May 12, 2026
- High7.5lfprojects mlflow Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')KEVEPSS 3.2%May 11, 2026
- Critical9.6TanStack Unspecified VulnerabilityKEVEPSS 1.1%May 11, 2026
- High8.8Grav is a file-based Web platform.KEVEPSS 0.5%May 11, 2026
- High7.3Improper Control of Generation of Code ('Code Injection')KEVEPSS 0.8%May 11, 2026
- High7.8Linux Kernel Out-of-bounds WriteKEVEPSS 2.3%May 11, 2026
- Unknowngetflightpath flightpath Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')KEVEPSS 62.6%May 11, 2026
- UnknownSonicWall SonicOS Use of Externally-Controlled Format StringKEVEPSS 0.9%May 10, 2026
- High7.5An integer overflow in network packet parsing code in PgBouncer before 1.25.2 bypasses a boundary check and can lead to a crash.KEVEPSS 0.7%May 9, 2026
- High7.3PraisonAI is a multi-agent teams system.KEVEPSS 0.8%May 8, 2026
- Critical9.3Daemon Tools Lite Embedded Malicious Code VulnerabilityKEVEPSS 1.0%May 8, 2026
- High8.8Linux Kernel Write-what-where ConditionKEVEPSS 94.2%May 8, 2026
- High8.7BerriAI LiteLLM Command Injection VulnerabilityKEVEPSS 92.6%May 7, 2026
- High7.2Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation VulnerabilityKEVEPSS 2.5%May 7, 2026
- High8.8The Slider Revolution plugin for WordPress is vulnerable to Arbitrary File Upload in versions 7.0.0 to 7.0.10 via the '_get_media_url' and '_check_file_path' function.KEVEPSS 0.8%May 7, 2026
- Medium6.1Postorius through 1.3.13 does not escape HTML in the message subject when rendering it in the Held messages pop-up, as exploited in the wild in May 2026.KEVEPSS 0.3%May 7, 2026
- UnknownW3 Total Cache '_parse_dynamic_mfunc' Command InjectionKEVEPSS 22.6%May 7, 2026
- Critical9.8OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables.KEVEPSS 4.7%May 5, 2026
- High7.7Redis is an in-memory data structure store.KEVEPSS 3.7%May 5, 2026
- Critical9.1Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')KEVEPSS 3.6%May 5, 2026
- Medium6.9Arista Extensible Operating System Incomplete Comparison with Missing Factors VulnerabilityKEVEPSS 0.6%May 5, 2026
- Critical9.3Palo Alto Networks PAN-OS Out-of-bounds Write VulnerabilityKEVEPSS 31.7%May 5, 2026
- Unknowncleantalk security_\&_malware_scan Unrestricted Upload of File with Dangerous TypeKEVEPSS 1.6%May 5, 2026
- Unknownscriptsbundle adforest Weak Password Recovery Mechanism for Forgotten PasswordKEVEPSS 0.7%May 5, 2026
- Unknownscriptsbundle adforest Authentication Bypass Using an Alternate Path or ChannelKEVEPSS 1.2%May 5, 2026