Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.5Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Wat…Check if you run itEPSS 0.88%May 29, 2026
- High8.6Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Wat…Check if you run itEPSS 0.88%May 29, 2026
- High8.6Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Administration WebUI in Wat…Check if you run itEPSS 0.88%May 29, 2026
- High8.1The Media Library Assistant plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.35 This is due to missing nonce verifi…Check if you run itEPSS 0.32%May 29, 2026
- Medium4.1Weak authentication in the Wireless Control Module (WCM) of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker with read acc…Check if you run itEPSS 0.14%May 29, 2026
- Medium4.8A flaw was found in libsoup.Check if you run itEPSS 0.87%May 29, 2026
- Medium5.3In OpenStack Neutron before 28.0.1, the tagging controller enforces plural policy action names on single-tag write operations while the defined policy rules use singular names.Check if you run itEPSS 0.43%May 28, 2026
- High7.1LinkAce is a self-hosted archive to collect website links.Check if you run itEPSS 0.38%May 28, 2026
- Critical9.4Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments.Check if you run itEPSS 0.45%May 28, 2026
- High7.7Server-Side Request Forgery (CWE-918) in Kibana can allow an authenticated user with connector management privileges to bypass the operator-configured connector allowl…Check if you run itEPSS 0.32%May 28, 2026
- High8.1Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations).Check if you run itEPSS 0.36%May 28, 2026
- High8.8Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations).Check if you run itEPSS 0.43%May 28, 2026
- Critical9.9Vulnerability in the Oracle iAssets product of Oracle E-Business Suite (component: Internal Operations).Check if you run itEPSS 0.43%May 28, 2026
- Critical9.1Vulnerability in the Oracle Internet Procurement Connector product of Oracle E-Business Suite (component: Internal Operations).Check if you run itEPSS 0.43%May 28, 2026
- High7.7Server-Side Request Forgery (CWE-918) in Kibana allows authenticated users with connector management privileges to bypass the operator-configured connection allowlist.Check if you run itEPSS 0.41%May 28, 2026
- Critical9.8Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications (component: Opera).Check if you run itEPSS 0.55%May 28, 2026
- Medium5.3Operation on a Resource after Expiration or Termination (CWE-672) in Kibana can lead to unauthorized information disclosure.Check if you run itEPSS 0.39%May 28, 2026
- High8.8RustFS is a distributed object storage system built in Rust.Check if you run itEPSS 0.54%May 28, 2026
- High7.1RustFS is a distributed object storage system built in Rust.Check if you run itEPSS 0.35%May 28, 2026
- High8.1An issue was discovered in OpenStack Keystone before 29.0.2.Check if you run itEPSS 0.32%May 28, 2026
- High8.8An issue was discovered in OpenStack Keystone before 29.0.2.Check if you run itEPSS 0.42%May 28, 2026
- High8.7pyLoad is a free and open-source download manager written in Python.Check if you run itEPSS 0.35%May 28, 2026
- Medium5.1Kuma is a modern Envoy-based service mesh that can run on every cloud across both Kubernetes and VMs.Check if you run itEPSS 0.30%May 28, 2026
- High8.7Local Path Provisioner provides a way for the Kubernetes users to utilize the local storage in each node.Check if you run itEPSS 0.39%May 28, 2026
- Critical9.3The Mennekes Amtron series (firmware versions ≤ 5.22.3) is vulnerable to privilege escalation.Check if you run itEPSS 0.41%May 28, 2026