Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.0PowerSYSTEM Center feature for device project groups allows an authenticated user with limited permissions to perform an unauthorized deletion of project groups.Check if you run itEPSS 0.15%May 12, 2026
- Medium6.9PowerSYSTEM Center REST API endpoint for devices allows a low privilege authenticated user to access information normally limited by operational permissions.Check if you run itEPSS 0.16%May 12, 2026
- High8.4PowerSYSTEM Center REST API endpoint for device account export allows an authenticated user with limited permissions to expose sensitive information normally restricte…Check if you run itEPSS 0.14%May 12, 2026
- High8.6Wing FTP Server before 8.1.3 contains an authenticated remote code execution vulnerability in the session serialization mechanism that allows authenticated administrat…Check if you run itEPSS 2.64%May 12, 2026
- High7.2nnU-Net is a semantic segmentation framework that automatically adapts its pipeline to a dataset.Check if you run itEPSS 0.29%May 12, 2026
- High7.5basic-ftp is an FTP client for Node.js.Check if you run itEPSS 0.51%May 12, 2026
- High8.7DSSRF is a Node.js library that provides a wide range of utilities and advanced SSRF defense checks.Check if you run itEPSS 0.41%May 12, 2026
- High8.6Wiki.js is an open source wiki app built on Node.js.Check if you run itEPSS 0.38%May 12, 2026
- High7.1Craft CMS is a content management system (CMS).Check if you run itEPSS 0.34%May 12, 2026
- High8.6Craft CMS is a content management system (CMS).Check if you run itEPSS 0.62%May 12, 2026
- High7.1Craft CMS is a content management system (CMS).Check if you run itEPSS 0.41%May 12, 2026
- Medium5.1PowerSYSTEM Center email notification service is affected by a CRLF injection vulnerability when using SMTPS communication.Check if you run itEPSS 0.27%May 12, 2026
- High8.4An Out-of-Bounds Read vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an at…Check if you run itEPSS 0.17%May 12, 2026
- High8.4An Out-of-Bounds Read vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an at…Check if you run itEPSS 0.17%May 12, 2026
- High8.4An Out-of-Bounds Write vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.216 and prior that could allow an a…Check if you run itEPSS 0.17%May 12, 2026
- Critical9.8Exim before 4.99.3, in certain GnuTLS configurations, has a remotely reachable use-after-free in the BDAT body parsing path.Check if you run itEPSS 1.27%May 12, 2026
- Medium4.9A vulnerability exists in the web-based management interface of an AOS-10 Gateway that could allow an authenticated remote attacker to access sensitive files on the un…Check if you run itEPSS 0.30%May 12, 2026
- Medium5.4A session management vulnerability in AOS-8 allows previously authenticated users to retain network access after their accounts are administratively disabled.Check if you run itEPSS 0.14%May 12, 2026
- High7.2A command injection vulnerability exists in the web-based management interface of AOS-8 and AOS-10 Operating Systems.Check if you run itEPSS 0.81%May 12, 2026
- High8.8Command injection vulnerabilities exist in the command line interface (CLI) service accessed by the PAPI protocol of AOS-8 and AOS-10 Operating Systems.Check if you run itEPSS 0.90%May 12, 2026
- High8.8Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems.Check if you run itEPSS 0.90%May 12, 2026
- High8.8Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems.Check if you run itEPSS 0.90%May 12, 2026
- High8.8Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems.Check if you run itEPSS 0.90%May 12, 2026
- High8.8Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems.Check if you run itEPSS 0.90%May 12, 2026
- High7.2Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems.Check if you run itEPSS 0.92%May 12, 2026
Sort