Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1epa4all-client is the Java Client for epa4all / ePA 3.0 in the Telematik Infrastruktur.Check if you run itEPSS 0.19%May 26, 2026
- Critical9.2GitLab MCP Server lets an AI agent talk directly to GitLab.Check if you run itEPSS 0.62%May 26, 2026
- Medium5.3MaxKB is an open-source AI assistant for enterprise.Check if you run itEPSS 0.35%May 26, 2026
- High8.5Chatwoot is a customer engagement suite.Check if you run itEPSS 0.31%May 26, 2026
- Medium5.5A vulnerability has been found in sambitraj STUDENT-MANAGEMENT-SYSTEM up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5.Check if you run itEPSS 0.50%May 26, 2026
- Medium5.5FastNetMon Community Edition through 1.2.9 is vulnerable to a local symlink attack via predictable file paths in /tmp.Check if you run itEPSS 0.17%May 26, 2026
- High8.1FastNetMon Community Edition through 1.2.9 exposes a gRPC API server on port 50052 with no authentication mechanism.Check if you run itEPSS 0.38%May 26, 2026
- Medium6.5Files or Directories Accessible to External Parties, Server-Side Request Forgery (SSRF) vulnerability in Apache Flink Kubernetes Operator.Check if you run itEPSS 0.49%May 26, 2026
- Medium5.5A vulnerability was determined in Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform 1.3.0.Check if you run itEPSS 0.72%May 26, 2026
- High8.6OpenKM 6.3.12 contains a remote code execution vulnerability that allows authenticated administrators to execute arbitrary Java/BeanShell code through the /admin/Scrip…Check if you run itEPSS 1.18%May 26, 2026
- High8.7FreeRDP before 3.26.0 contains a heap-buffer-overflow vulnerability in gdi_CacheToSurface that allows remote attackers to write out-of-bounds heap memory.Check if you run itEPSS 1.06%May 26, 2026
- High8.7An Allocation of Resources Without Limits or Throttling vulnerability in the OPC-UA Server used in PPT30 Operating System versions before 1.8.0 may be used by an unaut…Check if you run itEPSS 0.32%May 26, 2026
- Medium5.5A vulnerability was detected in Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform 3000WEBV2.Check if you run itEPSS 0.41%May 26, 2026
- Medium5.5A vulnerability was found in yashpokharna2555 StudentManagementSystem up to cb2f558ddf8d19396de0f92abf2d224d46a0a203.Check if you run itEPSS 0.41%May 25, 2026
- Critical9.2shell-quote's function did not validate object-token inputs against the operator model used by .Check if you run itEPSS 0.82%May 22, 2026
- High7.1Open ISES Tickets before 3.44.2 contains a SQL injection vulnerability in db_loader.php where the multiple POST parameters (ticketsdb, ticketshost, ticketsuser, ticket…Check if you run itEPSS 0.36%May 21, 2026
- High8.8The ConnectWise Automate™ Agent does not fully verify the authenticity of components obtained during plugin loading and self-update operations.Check if you run itEPSS 0.21%May 21, 2026
- High7.1Exposure of private personal information to an unauthorized actor, Insufficiently Protected Credentials vulnerability in Digital Operations Services Inc.Check if you run itEPSS 0.22%May 21, 2026
- High8.1(Externally Controlled Reference to a Resource in Another Sphere), (Authorization Bypass Through User-Controlled Key) vulnerability in Apache Camel K.Check if you run itEPSS 0.39%May 21, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: rtmutex: Use waiter::task instead of current in remove_waiter() remove_waiter() is used by the slow…Check if you run itEPSS 0.79%May 21, 2026
- High7.3In the Linux kernel, the following vulnerability has been resolved: fbdev: udlfb: add vm_ops to dlfb_ops_mmap to prevent use-after-free dlfb_ops_mmap() uses remap_pfn_…Check if you run itEPSS 0.17%May 21, 2026
- Medium6.9The affected product may expose credentials remotely between low privileged visualization users during concurrent login operations due to insufficient isolation of aut…Check if you run itEPSS 0.24%May 21, 2026
- Medium6.5In the case of the cap_net service, when a key present in the old limit was omitted from the new limit, the missing key was treated as "allow any" instead of being rejected.Check if you run itEPSS 0.29%May 21, 2026
- Low3.7A time-of-check time-of-use (TOCTOU) condition in the ad_flush function in Netatalk 3.0.0 through 4.4.2 involves root-privileged file operations, which may allow a rem…Check if you run itEPSS 0.27%May 21, 2026
- High7.5A logic error involving bitwise OR operations in Netatalk 3.1.4 through 4.4.2 allows a remote authenticated attacker to inject OS commands and execute arbitrary code.Check if you run itEPSS 0.61%May 21, 2026