Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low3.7A time-of-check time-of-use (TOCTOU) condition in the ad_flush function in Netatalk 3.0.0 through 4.4.2 involves root-privileged file operations, which may allow a rem…Check if you run itEPSS 0.27%May 21, 2026
- High7.5A logic error involving bitwise OR operations in Netatalk 3.1.4 through 4.4.2 allows a remote authenticated attacker to inject OS commands and execute arbitrary code.Check if you run itEPSS 0.61%May 21, 2026
- Critical10.0A missing authentication vulnerability exists in the Altium 365 SearchService.Check if you run itEPSS 0.54%May 21, 2026
- High8.5A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software.Check if you run itEPSS 4.57%May 20, 2026
- Medium6.5In Splunk Enterprise versions below 10.2.2, 10.0.5, 9.4.11, and 9.3.12, and Splunk Cloud Platform versions below 10.4.2603.1, 10.3.2512.9, 10.2.2510.11, 10.1.2507.21,…Check if you run itEPSS 0.40%May 20, 2026
- Medium6.5In Splunk AI Toolkit versions below 5.7.3, a low-privileged user that does not hold the 'admin' or 'power' roles could access confidential data that was restricted thr…Check if you run itEPSS 0.32%May 20, 2026
- High8.8Cross-Site Request Forgery (CSRF) vulnerability in InfoScale v.9.1.3 Operations Manager (VIOM) allows an attacker to force the user with an active session into clickin…Check if you run itEPSS 0.22%May 20, 2026
- Medium5.4InfoScale VIOM 9.1.3 allows XSS.Check if you run itEPSS 0.24%May 20, 2026
- Medium6.5SQL injection in InfoScale VIOM before v9.1.3 allows remote attackers to escalate privileges.Check if you run itEPSS 0.35%May 20, 2026
- High7.2A vulnerability in the SSL certificate handling of Cisco ThousandEyes Virtual Appliance could allow an authenticated, remote attacker to execute commands on the underl…Check if you run itEPSS 0.44%May 20, 2026
- Low2.3Insufficient Verification of Data Authenticity in the feedback function of Mesalvo MEONA (MEONA Client and MEONA Server).Check if you run itEPSS 0.09%May 20, 2026
- Medium4.4Use of a Password Hash With Insufficient Computational Effort in Mesalvo MEONA (MEONA Server and MEONA Client) for user accounts whose password was last set under a ve…Check if you run itEPSS 0.10%May 20, 2026
- High7.8Improper Access Control vulnerability in Mesalvo MEONA (MEONA Client and MEONA Server) allows an authenticated MEONA user to access administrative functions of the MEO…Check if you run itEPSS 0.13%May 20, 2026
- Medium6.9NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability when handling replies with very large RRsets that Unbound needs to perform name compression for.Check if you run itEPSS 0.72%May 20, 2026
- High7.2Rsync version 3.4.2 and prior contain symlink race condition vulnerabilities in path-based system calls including chmod, lchown, utimes, rename, unlink, mkdir, symlink…Check if you run itEPSS 0.13%May 20, 2026
- Medium6.8Microsoft is aware of a security feature bypass vulnerability in Windows publicly referred to as "YellowKey".Check if you run itEPSS 0.49%May 20, 2026
- Medium5.1Ledger Nano X, Flex, and Stax devices contain a denial of service vulnerability in the MCU firmware update process due to missing validation of the reset_handler param…Check if you run itEPSS 0.21%May 19, 2026
- High7.3An authorization vulnerability exists in Innoshop 0.6.0.Check if you run itEPSS 0.31%May 19, 2026
- Medium6.5CtrlPanel is open-source billing software for hosting providers.Check if you run itEPSS 0.35%May 19, 2026
- Critical9.2NGINX JavaScript has a vulnerability when the js_fetch_proxy directive is configured with at least one client-controlled NGINX variable (for example, $http_*, $arg_*,…Check if you run itEPSS 0.79%May 19, 2026
- Medium5.3An issue was discovered in the Portrait Dell Color Management application before 3.7.0 for Dell monitors.Check if you run itEPSS 0.15%May 19, 2026
- Critical9.1An authenticated Remote Code Execution (RCE) vulnerability was identified in GlassFish's Administration Console.Check if you run itEPSS 0.83%May 19, 2026
- High8.1A flaw was found in Keycloak's URL validation logic during redirect operations.Check if you run itEPSS 0.50%May 19, 2026
- Medium6.8A flaw was found in Keycloak.Check if you run itEPSS 0.38%May 19, 2026
- High7.3Server-Side Request Forgery (SSRF) vulnerability in Apache OFBiz via Content component operations.Check if you run itEPSS 0.61%May 19, 2026