Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.Check if you run itEPSS 0.30%May 18, 2026
- High8.8DumbAssets through 1.0.11 contains a path traversal vulnerability in the POST /api/delete-file endpoint and filesToDelete array parameters that allows unauthenticated…Check if you run itEPSS 0.63%May 18, 2026
- Critical10.0Improper authentication in Azure Local Disconnected Operations allows an unauthorized attacker to elevate privileges over a network.Check if you run itEPSS 0.49%May 18, 2026
- Medium5.7NetBSD prior to commit ec8451e contains a signed integer overflow vulnerability in the cryptodev_op() function in sys/opencrypto/cryptodev.c where the local variable i…Check if you run itEPSS 0.11%May 18, 2026
- Medium5.7NetBSD prior to commit ec8451e contains a race condition vulnerability in cryptodev_op() within the opencrypto subsystem that allows local attackers to trigger a doubl…Check if you run itEPSS 0.08%May 18, 2026
- Medium6.1HSC MailInspector 5.3.3-7 is vulnerable to Cross Site Scripting (XSS) in the /police/WarningUrlPage.php endpoint due to improper neutralization of user-supplied input…Check if you run itEPSS 0.19%May 18, 2026
- Medium6.1HSC MailInspector v5.3.3-7 contains a Cross-Site Scripting (XSS) vulnerability in the /tap/tap.php endpoint due to improper neutralization of user-controlled input usi…Check if you run itEPSS 0.24%May 18, 2026
- High7.5HSC MailInspector 5.3.3-7 has a Path Traversal vulnerability due to improper validation of user-supplied input in the /tap/dw.php endpoint.Check if you run itEPSS 2.66%May 18, 2026
- High7.5HSC MailInspector v5.3.3-7 contains a Local File Inclusion (LFI) vulnerability caused by improper control of user-supplied file paths.Check if you run itEPSS 1.53%May 18, 2026
- Critical9.1Incorrect access control in the /uci/get/ endpoint of NOVUS AirGate 4G firmware v1.1.16 allows unauthenticated attackers to obtain administrator credentials via a craf…Check if you run itEPSS 0.24%May 18, 2026
- High7.1Creating a "2dsphere_bucket" index on a non-timeseries bucket collection will succeed, but any subsequent attempt to insert a document which triggers updating that ind…Check if you run itEPSS 0.24%May 18, 2026
- Critical10.0A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on…Check this weekEPSS 15.15%May 18, 2026
- High8.8Thermo Fisher Scientific Torrent Suite Dx through 5.14.2 has a privilege escalation vulnerability that may allow an authenticated user with limited access privileges t…Check if you run itEPSS 0.26%May 18, 2026
- Medium6.2OpENer v2.3-558-g1e99582 contains an out-of-bounds read vulnerability in the Common Packet Format (CPF) parser, specifically in CreateCommonPacketFormatStructure() in…Check if you run itEPSS 0.11%May 18, 2026
- Medium5.3An issue in Intelbras VIP-1230-D-G4 Version V2.800.00IB00C.0.T allows a remote attacker to obtain sensitive information via password reset functionality under /OutsideCmdCheck if you run itEPSS 0.35%May 18, 2026
- Medium6.5An attacker in a privileged network position may be able to leak sensitive information.Check if you run itEPSS 0.27%May 18, 2026
- High8.8ngrok v4.3.3 and 5.0.0-beta.2 is vulnerable to Command Injection.Check if you run itEPSS 0.98%May 18, 2026
- High7.5In tinyMQTT commit 6226ade15bd4f97be2d196352e64dd10937c1962 (2024-02-18), the broker mishandles protocol violations during CONNECT packet parsing.Check if you run itEPSS 0.28%May 18, 2026
- High8.2Dify before version 1.14.2 contains an authorization bypass vulnerability in the file preview endpoint that allows any authenticated user to read up to 3,000 character…Check if you run itEPSS 0.43%May 18, 2026
- Critical9.3dify dify Relative Path TraversalPatch nowKEVEPSS 22.71%May 18, 2026
- Critical9.3Dify before version 1.14.2 contains an authorization bypass vulnerability that allows authenticated editor users to set and enable trace configurations for any applica…Check if you run itEPSS 5.97%May 18, 2026
- High7.5An issue in prestashop upsshipping all versions through at least 2.4.0 allows a remote attacker to obtain sensitive information via the /modules/upsshipping/logs/, and…Check if you run itEPSS 0.31%May 18, 2026
- High7.3Offline Hospital Management System 5.3.0 allows remote code execution due to an improper Electron renderer configuration.Check if you run itEPSS 0.32%May 18, 2026
- High7.5Gnutls: gnutls: denial of service via dtls packet reordering vulnerabilityCheck if you run itEPSS 1.33%May 18, 2026
- Medium6.3A flaw has been found in opensourcepos Open Source Point of Sale up to 3.4.2.Check if you run itEPSS 0.18%May 18, 2026
Sort