Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5The mem0 1.0.0 server lacks authentication and authorization controls for its memory deletion API endpoint (DELETE /memories).Check if you run itEPSS 0.39%May 12, 2026
- High7.5The mem0 1.0.0 server lacks authentication and authorization controls for its memory management API endpoints.Check if you run itEPSS 0.37%May 12, 2026
- Critical9.8The mamba language model framework thru 2.2.6 is vulnerable to insecure deserialization (CWE-502) when loading pre-trained models from HuggingFace Hub.Check if you run itEPSS 0.41%May 12, 2026
- Critical9.8The Ludwig framework thru 0.10.4 is vulnerable to insecure deserialization (CWE-502) in its model serving component.Check if you run itEPSS 0.50%May 12, 2026
- Critical9.8The Ludwig framework thru 0.10.4 is vulnerable to insecure deserialization (CWE-502) through its predict() method.Check if you run itEPSS 0.60%May 12, 2026
- Critical9.8The llm CLI tool thru 0.27.1 contains a critical code injection vulnerability via its --functions command-line argument.Check if you run itEPSS 0.33%May 12, 2026
- Critical9.8The imgaug library thru 0.4.0 contains an insecure deserialization vulnerability in its BackgroundAugmenter class within the multicore.py module.Check if you run itEPSS 0.47%May 12, 2026
- Critical9.8Horovod thru 0.28.1 contains an insecure deserialization vulnerability (CWE-502) in its KVStore HTTP server component.Check if you run itEPSS 0.69%May 12, 2026
- Critical9.8Guardrails AI thru 0.6.7 contains a code injection vulnerability (CWE-94) in its Hub package installation mechanism.Check if you run itEPSS 0.64%May 12, 2026
- High8.8The CosyVoice project thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e (2025-30-21) contains an insecure deserialization vulnerability (CWE-502) in its model loading process.Check if you run itEPSS 0.46%May 12, 2026
- Critical9.8Cognee thru v0.4.0 contains a critical remote code execution vulnerability in its notebook cell execution API endpoint.Check if you run itEPSS 0.64%May 12, 2026
- Critical9.8The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains a command-line argument injection vulnerability in its Kubeflow component (robustness_evaluation_fgsm_pytorch.py).Check if you run itEPSS 0.55%May 12, 2026
- Critical9.8The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains an insecure deserialization vulnerability (CWE-502) in its Kubeflow component's model loading functionality.Check if you run itEPSS 0.60%May 12, 2026
- Critical9.1Insufficient ownership check in allows an authenticated client area user to submit requests using another user’s without any ownership validation leading to unauthoriz…Check if you run itEPSS 0.32%May 12, 2026
- Critical9.8A missing authorization vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.2 through 5.0.5, FortiSand…Check if you run itEPSS 0.73%May 12, 2026
- Medium6.5An improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiDeceptor 6.0.0 through 6.0.2, FortiDeceptor 5.3.0…Check if you run itEPSS 0.24%May 12, 2026
- High8.8An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiNDR 7.6.0 through 7.6.2, FortiNDR 7.4.0 through…Check if you run itEPSS 0.26%May 12, 2026
- Medium6.7Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally.Check if you run itEPSS 0.32%May 12, 2026
- High8.5Improper input validation for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow an escalation of privilege.Check if you run itEPSS 0.11%May 12, 2026
- High8.5Out-of-bounds write for some Intel(R) QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a escalation of privilege.Check if you run itEPSS 0.11%May 12, 2026
- Medium5.3A use of potentially dangerous function vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.8, FortiAnalyzer 7.2 all versions,…Check if you run itEPSS 0.42%May 12, 2026
- Medium6.7An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiAP 7.6.0 through 7.6.2, FortiAP 7.4.0 thro…Check if you run itEPSS 0.56%May 12, 2026
- High8.8A out-of-bounds write vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11 allows attacker to execute unaut…Check if you run itEPSS 0.56%May 12, 2026
- High7.2An improper neutralization of special elements used in an SQL Command ("SQL Injection&") vulnerability [CWE-89] vulnerability in Fortinet FortiMail 7.6.0 through 7.6.3…Check if you run itEPSS 0.36%May 12, 2026
- Medium6.7An improper neutralization of special elements used in an OS command ("OS Command Injection") vulnerability [CWE-78] vulnerability in Fortinet FortiAP 7.6.0 through 7.…Check if you run itEPSS 0.56%May 12, 2026
Sort