Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has Pre-authentication SQL injection in the virtuser_query plugin via a preg_replace() backslash escape bypass.Patch nowKEVEPSS 1.70%May 25, 2026
- Critical9.8Drupal Core SQL Injection VulnerabilityPatch nowKEVEPSS 89.38%May 20, 2026
- High7.1A flaw was found in Keycloak.Check if you run itEPSS 0.41%May 19, 2026
- High7.5A session fixation vulnerability was found in Keycloak's login-actions endpoints.Check if you run itEPSS 0.84%May 19, 2026
- Medium6.8A flaw was found in Keycloak.Check if you run itEPSS 0.44%May 19, 2026
- High8.6lfprojects mlflow Authentication Bypass by Primary WeaknessPatch nowKEVEPSS 20.78%May 15, 2026
- Medium6.1Microsoft Exchange Server Cross-Site Scripting VulnerabilityPatch nowKEVEPSS 70.66%May 14, 2026
- Medium5.9Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allow a local user to escalate their privileges to NT AUTHORITY\SYSTEM…Check if you run itEPSS 0.18%May 13, 2026
- High8.6Next.js is a React framework for building full-stack web applications.Check this weekEPSS 35.54%May 13, 2026
- High8.1Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 0.64%May 13, 2026
- High7.5Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 0.80%May 13, 2026
- Critical9.2NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module.Patch nowKEVEPSS 68.05%May 13, 2026
- Critical9.3Strapi is an open source headless content management system.Check if you run itEPSS 1.18%May 13, 2026
- High7.5Using libcurl, when a custom header is first set for an HTTP request and a second request is subsequently done using the same *easy handle* but without the custom header set, the sCheck if you run itEPSS 0.29%May 13, 2026
- High7.8Palo Alto Networks PAN-OS Authentication Bypass VulnerabilityPatch nowKEVEPSS 95.01%May 13, 2026
- High8.0Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.Check if you run itEPSS 1.82%May 12, 2026
- High8.2New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system.Check if you run itEPSS 0.85%May 8, 2026
- Critical9.6Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.Check if you run itEPSS 0.65%May 7, 2026
- High7.2Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation VulnerabilityPatch nowKEVEPSS 34.45%May 7, 2026
- High7.5Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 1.59%May 7, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: eventpoll: defer struct eventpoll free to RCU grace period In certain situations, ep_free() in even…Check if you run itEPSS 0.48%May 6, 2026
- Medium6.1Redis is an in-memory data structure store.Check if you run itEPSS 3.09%May 5, 2026
- High8.7ERPGo SaaS 3.9 contains a CSV injection vulnerability that allows authenticated attackers to inject spreadsheet formulas into vendor name fields that execute on the wo…Check if you run itEPSS 0.35%May 5, 2026
- Critical9.3Palo Alto Networks PAN-OS Out-of-bounds Write VulnerabilityPatch nowKEVEPSS 41.71%May 5, 2026
- Critical9.8The fix for CVE-2026-41635 was not applied to the 2.1.X and 2.2.X branches.Check if you run itEPSS 1.23%May 1, 2026
Sort