Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4TinyMCE is an open source rich text editor.Check if you run itEPSS 0.28%May 28, 2026
- Medium5.4TinyMCE is an open source rich text editor.Check if you run itEPSS 0.26%May 28, 2026
- Medium5.4TinyMCE is an open source rich text editor.Check if you run itEPSS 0.19%May 28, 2026
- Medium5.4TinyMCE is an open source rich text editor.Check if you run itEPSS 0.28%May 28, 2026
- High8.2Python Liquid is a Python engine for the Liquid template language.Check if you run itEPSS 0.34%May 28, 2026
- Critical9.3mapfish-print is a component of MapFish for printing templated cartographic maps.Check if you run itEPSS 0.33%May 28, 2026
- High7.5esm.sh is a no-build content delivery network (CDN) for web development.Check if you run itEPSS 0.39%May 28, 2026
- High8.7esm.sh is a no-build content delivery network (CDN) for web development.Check if you run itEPSS 0.44%May 28, 2026
- High8.2Espressif Shared GitHub DangerJS is a reusable GitHub Action CI DangerJS workflow for Espressif GitHub projects.Check if you run itEPSS 0.18%May 28, 2026
- High7.5CryptX versions before 0.088_001 for Perl have a stack buffer overflow in four AEAD decrypt_verify helpers.Check if you run itEPSS 0.47%May 28, 2026
- High8.8phpMyFAQ before 4.1.3 contains an unauthenticated password reset vulnerability in the user password update API endpoint that allows attackers to change account passwor…Check if you run itEPSS 0.30%May 28, 2026
- High8.8phpMyFAQ before 4.1.3 contains an authentication bypass vulnerability in the password reset endpoint that allows unauthenticated attackers to reset any user account pa…Check if you run itEPSS 0.42%May 28, 2026
- High8.7phpMyFAQ before 4.1.3 contains an authentication bypass vulnerability in API v4.0 where the default empty api.apiClientToken allows unauthenticated users to create and…Check if you run itEPSS 0.48%May 28, 2026
- High8.7phpMyFAQ before 4.1.3 contains an insecure direct object reference vulnerability in the admin API user password endpoint that allows authenticated administrators to ch…Check if you run itEPSS 0.38%May 28, 2026
- UnknownCVE-2024-49112 - Security Update Guide - Microsoft - Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution VulnerabilityCheck this weekEPSS 72.17%May 28, 2026
- UnknownCVE-2025-53766 - Security Update Guide - Microsoft - GDI+ Remote Code Execution VulnerabilityCheck if you run itEPSS 8.46%May 28, 2026
- Critical9.8Oracle E-Business Suite Improper Privilege Management VulnerabilityPatch nowKEVEPSS 12.31%May 28, 2026
- Low2.9Deserialization of untrusted data vulnerability in QOS.CH Sarl logback logback-core (HardenedObjectInputStream (logback-core) modules) allows Object Injection albeit h…Check if you run itEPSS 0.37%May 28, 2026
- Medium5.3A user with physical access to a smartphone can bypass authentication mechanism of Kidsview mobile application and grant himself full access to the device owner's acco…Check if you run itEPSS 0.21%May 28, 2026
- Critical9.3The Mennekes Amtron series (firmware versions ≤ 5.22.3) is vulnerable to privilege escalation.Check if you run itEPSS 0.52%May 28, 2026
- Critical9.3The Mennekes Amtron series (firmware versions ≤ 5.22.3) is vulnerable to an authentication bypass.Check if you run itEPSS 0.78%May 28, 2026
- High8.4An issue was discovered in Canonical Multipass before version 1.16.3.Check if you run itEPSS 0.51%May 28, 2026
- High7.8An issue was discovered in Canonical Multipass for macOS before version 1.16.3 due to an incomplete fix for CVE-2025-5199.Check if you run itEPSS 0.14%May 28, 2026
- Medium4.8bzip2 contains an off‑by‑one error in the bzip2recover utility.Check if you run itEPSS 0.13%May 28, 2026
- High7.3An issue in SMSGate sms-core<=2.1.13.6 allows a remote attacker to execute arbitrary code via the Cmpp7FDeliverRequestMessageCodec.java componentCheck if you run itEPSS 0.29%May 28, 2026
Sort