Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.7Memory Corruption when output buffer size is smaller than input buffer size during data copying operation.Check if you run itEPSS 0.08%Jun 1, 2026
- High7.8Memory Corruption when running a memory copy operation due to invalid writes caused by a null pointer.Check if you run itEPSS 0.07%Jun 1, 2026
- High8.6Dräger Infinity Explorer C700 contains a privilege escalation vulnerability that allows attackers to break out of kiosk mode and access the underlying operating system…Check if you run itEPSS 0.12%Jun 1, 2026
- Low2.7Capsule is a multi-tenancy and policy-based framework for Kubernetes.Check if you run itEPSS 0.25%Jun 1, 2026
- High7.8Improper access control in the PCTCore64.sys Windows kernel driver from PC Tools Internet Security allows user-mode processes to access the PCTCoreDriver WDM device in…Check if you run itEPSS 0.18%Jun 1, 2026
- Medium6.4The PDBM application relies on a static, hard‑coded secret embedded in the PDBM.exe executable.Check if you run itEPSS 0.09%Jun 1, 2026
- Medium5.9Apache Airflow's EmailOperator and the underlying helpers established SMTP STARTTLS connections without verifying the remote certificate when the deployment used witho…Check if you run itEPSS 0.27%Jun 1, 2026
- High8.8Incorrect Default Permissions vulnerability in Apache ActiveMQ.Check if you run itEPSS 0.63%Jun 1, 2026
- High7.1Path traversal vulnerability in Apache MINA SSHD bundle sshd-git.Check if you run itEPSS 0.78%Jun 1, 2026
- High8.8Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ.Check if you run itEPSS 0.88%Jun 1, 2026
- High8.1Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ.Check if you run itEPSS 0.66%Jun 1, 2026
- Medium6.5A bug in Apache Airflow's rendered-template field handling caused nested sensitive-key masking (e.g.Check if you run itEPSS 0.52%Jun 1, 2026
- High7.5A bug in Apache Airflow's bulk Task Instances API ( ) evaluated authorization against the resolved from the URL path while operating on the / extracted from request-bo…Check if you run itEPSS 0.76%Jun 1, 2026
- High7.2A bug in the login redirect route in Apache Airflow allowed authenticated users to craft URLs that bypassed the check, enabling redirection from a trusted Airflow doma…Check if you run itEPSS 0.76%Jun 1, 2026
- Medium6.5A bug in the GET REST API endpoint in Apache Airflow allowed an authenticated UI/API user with Connection-read permission to retrieve secrets stored in a Connection's…Check if you run itEPSS 0.66%Jun 1, 2026
- Medium5.5A flaw has been found in raisulislamg4 student_management_system_by_php up to 310d950e09013d5133c6b9210aff9444382d16d1.Check if you run itEPSS 0.26%Jun 1, 2026
- Low1.9A vulnerability has been found in Assimp up to 6.0.4.Check if you run itEPSS 0.12%May 31, 2026
- Critical9.1GitHub CLI (gh) is GitHub’s official command line tool.Check if you run itEPSS 0.45%May 29, 2026
- Critical9.9Plesk contains an XPath injection vulnerability in the APS Application Catalog search functionality, where user-supplied input is interpolated into XPath queries witho…Check if you run itEPSS 0.55%May 29, 2026
- High8.7OpenClaw before 2026.5.18 contains a scope bypass vulnerability in the Gateway chat.send route that allows scoped clients to execute privileged commands.Check if you run itEPSS 0.45%May 29, 2026
- Low2.3OpenClaw before 2026.5.12 contains a privilege escalation vulnerability in Slack plugin approvals that allows exec-authorized users to resolve plugin approvals through…Check if you run itEPSS 0.29%May 29, 2026
- High8.7OpenClaw before 2026.5.4 contains an authorization bypass vulnerability in the bundled device-pair plugin that allows non-owner authorized chat senders to issue device…Check if you run itEPSS 0.40%May 29, 2026
- Medium4.1Improper handling of physical conditions in the bike-shutdown control of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows a physical attacker with acce…Check if you run itEPSS 0.24%May 29, 2026
- Medium4.1Expected behavior violation in the in-vehicle network of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker to bypass the mo…Check if you run itEPSS 0.27%May 29, 2026
- High8.1n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations.Check if you run itEPSS 0.41%May 29, 2026