Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low0.9A security flaw has been discovered in Oinone Pamirs up to 7.2.0.Check if you run itEPSS 0.21%May 17, 2026
- Low2.1A vulnerability was identified in Oinone Pamirs up to 7.2.0.Check if you run itEPSS 0.41%May 17, 2026
- Medium5.5A vulnerability was determined in Oinone Pamirs up to 7.2.0.Check if you run itEPSS 0.41%May 17, 2026
- Medium6.3### Summary throws when called with and on an array containing or .Check if you run itEPSS 0.42%May 17, 2026
- Medium6.4Traefik is an HTTP reverse proxy and load balancer.Check if you run itEPSS 0.55%May 15, 2026
- High7.3Oinone Pamirs 7.0.0 contains a command injection vulnerability in CommandHelper.executeCommands.Check if you run itEPSS 2.18%May 15, 2026
- Medium6.5Oinone Pamirs 7.0.0 contains an XML External Entity (XXE) issue in its XStream-based XML parsing logic.Check if you run itEPSS 0.49%May 15, 2026
- Medium6.5Oinone Pamirs 7.0.0 contains a code execution vulnerability via ScriptRunner.Check if you run itEPSS 0.42%May 15, 2026
- High8.8The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Privilege Escalation in versions up to and including 3.28.36.Patch nowKEVEPSS 0.77%May 15, 2026
- Medium4.7python-utcp is the python implementation of UTCP.Check if you run itEPSS 0.20%May 14, 2026
- High8.8Diffusers is the a library for pretrained diffusion models.Check if you run itEPSS 0.89%May 14, 2026
- High7.5Python-Multipart is a streaming multipart parser for Python.Check if you run itEPSS 0.85%May 13, 2026
- Medium6.5The Grafana Live push endpoint can be exploited to cause unbounded memory allocation by sending a large or streaming request body, potentially leading to out-of-memory conditions.Check if you run itEPSS 0.33%May 13, 2026
- High8.1Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 0.67%May 13, 2026
- Low2.9Astro is a web framework.Check if you run itEPSS 0.20%May 13, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: Disable LPM on ST1000DM010-2EP102 According to a user report, the ST1000DM010-2EP…Check if you run itEPSS 0.16%May 13, 2026
- High8.7When a Client SSL profile is configured with Allow Dynamic Record Sizing on a UDP virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM…Check if you run itEPSS 0.46%May 13, 2026
- Medium6.3When Bidirectional Forwarding Detection (BFD) is configured in Static and Dynamic routing protocols, undisclosed traffic can cause the Traffic Management Microkernel (…Check if you run itEPSS 0.40%May 13, 2026
- High8.4Bytello Share (Windows Edition) installer executable provided by Bytello insecurely loads Dynamic Link Libraries.Check if you run itEPSS 0.18%May 13, 2026
- Medium5.3Statamic is a Laravel and Git powered content management system (CMS).Check if you run itEPSS 0.34%May 12, 2026
- Critical9.9Improper control of generation of code ('code injection') in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network.Check if you run itEPSS 0.99%May 12, 2026
- Critical9.1Improper control of generation of code ('code injection') in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network.Check if you run itEPSS 0.93%May 12, 2026
- High7.8Weak authentication in Dynamics Business Central allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.30%May 12, 2026
- Critical9.9Improper privilege management in Microsoft Dynamics 365 Customer Insights allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.77%May 12, 2026
- Critical9.8Guardrails AI thru 0.6.7 contains a code injection vulnerability (CWE-94) in its Hub package installation mechanism.Check if you run itEPSS 0.93%May 12, 2026